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(U) Skunks, Bogies, Silent Hounds, and the Flying Fish: 

The Gulf of Tonkin Mystery, 2-4 August 1964 

ROBERT J. HANYOK 



(C//SF )-The Gulf of Tonkin incidents of 2 to 4 
August 1964 have come to loom over the subse- 
quent American engagement in Indochina. The 
incidents, principally the second one of 4 August, 
led to the approval of the Gulf of Tonkin 
Resolution by the U.S. Congress, which handed 
President Johnson the carte blanche charter he 
had wanted for future intervention in Southeast 
Asia. From this point on, the American policy and 
programs would dominate the course of the 
Indochina War. At the height of the American 
involvement, over a half million U.S. soldiers, 
sailors, airmen, and marines would be stationed 
there. The war would spread across the border 
into Cambodia and escalate in Laos. Thailand 
assumed a greater importance as a base for sup- 
porting the military effort, especially for the air 
war, but also for SIGINT purposes of intercept 
and direction finding. 

(U) At the time, the Gulf of Tonkin incidents 
of August were not quite so controversial. 
According to the Johnson administration, the 
issue of the attacks was pretty much cut and 
dried. As the administration explained, our ships 
had been in international waters - anywhere 
from fifty to eighty miles from the DRV coastline 
by some calculations, during the alleged second 
attack - and were attacked twice, even though 
they were innocent of any bellicose gestures 
directed at North Vietnam. Secretary of Defense 
Robert McNamara had assured the Senate that 
there had been no connection between what the 
U.S. Navy was doing and any aggressive opera- 
tions by the South Vietnamese. 1 Washington 
claimed that the United States had to defend itself 
and guarantee freedom of navigation on the high 
seas. 



(U) However, within the government, the 
events of 4 August were never that clear. Even as 
the last flare fizzled in the dark waters of the 
South China Sea on that August night, there were 
conflicting narratives and interpretations of what 
had happened. James Stockdale, then a navy pilot 
at the scene, who had “the best seat in the house 
from which to detect boats,” saw nothing. “No 
boats,” he would later write, “no boat wakes, no 
ricochets off boats, no boat impacts, no torpedo 
wakes - nothing but black sea and American fire- 
power.” 2 The commander of the Maddox task 
force. Captain John J. Herrick, was not entirely 
certain what had transpired. (Captain Herrick 
actually was the commander of the destroyer divi- 
sion to which the Maddox belonged. For this mis- 
sion, he was aboard as the on-site commander.) 
Hours after the incident, he would radio the 
Commander-in-Chief, Pacific (CINCPAC) telling 
them that he was doubtful of many aspects of the 
“attack.” 

(U) It would be years before any evidence 
that an attack had not happened finally emerged 
in the public domain, and even then, most reluc- 
tantly. Yet, remarkably, some of the major partic- 
ipants in the events still maintained that the Gulf 
of Tonkin incident had occurred just as it had 
been originally reported. Secretary of Defense 
Robert McNamara, in his memoirs In Retrospect, 
considered the overall evidence for an attack still 
convincing . 3 The U.S. Navy’s history of the 
Vietnam conflict, written by Edward J. Marolda 
and Oscar P. Fitzgerald (hereafter referred to as 
the “Marolda-Fitzgerald history”), reported that 
the evidence for the second attack, especially 
from intelligence, including a small amount of 
SIGINT, was considered conclusive. 4 
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(U) The public literature on the Gulf of 
Tonkin for years has been overwhelmingly skep- 
tical about the 4 August battle. Articles that 
appeared in magazines within a few years illus- 
trated the general inconsistency in the descrip- 
tions of the incident of 4 August by simply using 
the conflicting testimony from the officers and 
crews of both ships. The first major critical vol- 
ume was Joseph Goulden’s Truth Is the First 
Casualty, published in 1969. The most complete 
work to date is Edwin Moise’s Tonkin Gulf and 
the Escalation of the Vietnam War. Moise’s work 
has the dual advantage of using some Vietnamese 
sources, as well as small portions of a few SIGENT 
reports released to the author under a Freedom of 
Information Act request. Yet, even what few 
scraps he received from NSA were enough to 
raise serious questions about the validity of the 
SIGINT reports cited by the administration 
which related to the 4 August incident. 5 

"tS//GI> The issue of whether the available 
SIGINT “proved” that there had been a second 
attack has been argued for years. In 1968, Robert 
McNamara testified before Senator William 
Fulbright’s Foreign Relations Committee’s hear- 
ings on the Gulf of Tonkin that the supporting 
signals intelligence was “unimpeachable.” On the 
other hand, in 1972 the deputy director of NSA, 
Louis Tordella, was quoted as saying that the 4 
August intercepts pertained to the 2 August 
attacks. In a 1975 article in the NSA mag az ine 
Cryptolog , the Gulf of Tonkin incident was 
retold, but the SIGINT for the night of August 4 
was not mentioned, except for the “military oper- 
ations” intercept, and even then without com- 
ment. 6 The Navy’s history of the Vietnam War 
would misconstrue the SIGINT (disguised as 
unsourced “intelligence”) associating portions of 
two critical intercepts and implying a connection 
in the evidence where none could be established. 7 

(C//SIJ Except for the sizable collection of 
SIGINT material within NSA, and a much small- 
er amount from the archives of the Naval Security 
Group (which essentially duplicates portions of 



the NSA holdings), almost all relevant material 
relating to the Gulf of Tonkin incidents has been 
released. Although the questions about what hap- 
pened in the Gulf of Tonkin on the night of 4 
August have been fairly well answered by the evi- 
dence from all of the other sources - radar, sonar, 
eyewitness, and archival - the SIGINT version 
needs to be told. This is because of the critical role 
that SIGINT played in defining the second attack 
in the minds of Johnson administration officials. 
Without the signals intelligence information, the 
administration had only the confused and con- 
flicting testimony and evidence of the men and 
equipment involved in the incident. It is difficult 
to imagine the 5 August retaliatory air strikes 
against North Vietnamese naval bases and instal- 
lations being ordered without the SIGINT “evi- 
dence.” 8 Therefore, it is necessary to recount in 
some detail what signals intelligence reported. 

(G//S f) For the first time ever, what will be 
presented in the following narrative is the com- 
plete SIGINT version of what happened in the 
Gulf of Tonkin between 2 and 4 August 1964. 
Until now, the NSA has officially maintained that 
the second incident of 4 August occurred. This 
position was established in the initial SIGINT 
reports of 4 August and sustained through a 
series of summary reports issued shortly after the 
crisis. In October 1964, a classified chronology of 
events for 2 to 4 August in the Gulf of Tonkin was 
published by NSA which furthered the contention 
that the second attack had occurred. 

(S//SI)~ In maintaining the official version of 
the attack, the NSA made use of surprisingly few 
published SIGINT reports - fifteen in all. The 
research behind the new version which follows is 
based on the discoveiy of an enormous amount of 
never-before-used SIGINT material. This includ- 
ed 122 relevant SIGINT products, along with 
watch center notes, oral history interviews, and 
messages among the various SIGINT and military 
command centers involved in the Gulf of Tonkin 
incidents. Naturally, this flood of new informa- 
tion changed dramatically the story of that night 
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of 4/5 August. The most important element is 
that it is now known what the North Vietnamese 
Navy was doing that night. And with this infor- 
mation a nearly complete story finally can be told. 

“(3//GI) Two startling findings emerged from 
the new research. First, it is not simply that there 
is a different story as to what happened; it is that 
no attack happened that night. Through a com- 
pound of analytic errors and an unwillingness to 
consider contrary evidence, American SIGINT 
elements in the region and at NSA HQs reported 
Hanoi’s plans to attack the two ships of the 
Desoto patrol. Further analytic errors and an 
obscuring of other information led to publication 
of more “evidence.” In truth, Hanoi’s navy was 
engaged in nothing that night but the salvage of 
two of the boats damaged on 2 August. 

(S//SI) The second finding pertains to the 
handling of the SIGINT material related to the 
Gulf of Tonkin by individuals at NSA Be ginnin g 
with the period of the crisis in early August, into 
the days of the immediate aftermath, and contin- 
uing into October 1964, SIGINT information was 
presented in such a manner as to preclude 
responsible decisionmakers in the Johnson 
administration from having the complete and 
objective narrative of events of 4 August 1964. 
Instead, only SIGINT that supported the claim 
that the communists had attacked the two 
destroyers was given to administration officials. 

- (0//0f ) This mishandling of the SIGINT was 
not done in a manner that can be construed as 
conspiratorial, that is, with manufactured evi- 
dence and collusion at all levels. Rather, the 
objective of these individuals was to support the 
Navy’s claim that the Desoto patrol had been 
deliberately attacked by the North Vietnamese. 
Yet, in order to substantiate that claim, all of the 
relevant SIGINT could not be provided to the 
White House and the Defense and intelligence 
officials. The conclusion that would be drawn 
from a review of all SIGINT evidence would have 
been that the North Vietnamese not only did not 



attack, but were uncertain as to the location of the 
ships. 

(G//Gft Instead, three things occurred with 
the SIGINT. First of all, the overwhelming por- 
tion of the SIGINT relevant to 4 August was kept 
out of the post-attack summary reports and the 
final report written in October 1964. The withheld 
information constituted nearly 90 percent of all 
available SIGINT. This information revealed the 
actual activities of the North Vietnamese on the 
night of 4 August that included salvage opera- 
tions of the two torpedo boats damaged on 2 
August, and coastal patrols by a small number of 
DRV craft. As will be demonstrated later in this 
chapter, the handful of SIGINT reports which 
suggested that an attack had occurred contained 
severe analytic errors, unexplained translation 
changes, and the conjunction of two unrelated 
messages into one translation. This latter product 
would become the Johnson administration’s 
main proof of the 4 August attack. 

(S//SI) Second, there were instances in which 
specious supporting SIGINT evidence was insert- 
ed into NSA summary reports issued shortly after 
the Gulf of Tonkin incidents. This SIGINT was 
not manufactured. Instead, it consisted of frag- 
ments of legitimate intercept lifted out of its con- 
text and inserted into the summary reports to 
support the contention of a premeditated North 
Vietnamese attack on 4 August. The sources of 
these fragments were not even referenced in the 
summaries. It took extensive research before the 
original reports containing these items could be 
identified. 

(0//Cff t Finally, there is the unexplained dis- 
appearance of vital decrypted Vietnamese text of 
the translation that was the basis of the adminis- 
tration’s most important evidence - the so-called 
Vietnamese after-action report of late 4 August. 
The loss of the text is important because the SIG- 
INT record shows that there were critical differ- 
ences in the English translations of it issued both 
by the navy intercept site in the Philippines and 
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NSA. Without the individual texts (there were 
two of them), it is difficult to determine why there 
are critical differences in the translations and 
more importantly, to understand why two sepa- 
rate North Vietnamese messages were combined 
into one translation by NSA. 

(U) Before a discussion can begin, it is neces- 
sary to understand how the Gulf of Tonkin inci- 
dents came to happen, the way they did, and what 
their significance was for the Johnson adminis- 
tration. To do that, we need to consider the 
Desoto mission that the Maddox was conducting 
at the time, as well as the Defense Department’s 
OPLAN-34A missions against the Democratic 
Republic of Vietnam (DRV). It was the conver- 
gence of the two that embroiled that ship in the 
crisis in the Tonkin Gulf. 



tions, the Desoto missions were not the function- 
al or operational equivalent of the ubiquitous 
Soviet electronic collection trawlers. 9 The Desoto 
missions primarily served the mission needs of 



local commanders* 
cal support in the 
and intercept data 



although they received techni- 
way of technical working aids 
from NSA. 



■f U) The Desotp patrols had a two-part mis- 
sion: to collect intelligence in support of the 
embarked commander and higher level authori- 
ties and to assert freedom of navigation in inter- 
nation al waters. The early Desoto missions in the 



waters^ 



had been tracked by the coastal radar sur- 
veillance networks! belonging to the naval forces 
While an occasional commu- 



nist patrol ship would come out and shadow the 
U,S. patrol, little else happened. 



(U) The Desoto Missions 

(S//SI) Desoto was the covemame for a U.S. 
Navy signals intelligence collection program 
begun in 1962 in which naval SIGINT direct sup- 
port units (DSU) were placed on board American 
destroyer patro ls along the Asiatic coastline in the 
western Pacific / 



(0 //Oft Physically, Desoto mission destroyers 
were unique in their configuration - a small van 
lashed to the ship which housed intercept posi- 
tions for voice and manual morse communica- 
tions. There also was a position which intercept- 
ed noncommunications emissions such as radars, 
referred to as electronic intelligence or ELINT. 
Finally, a communications position, which 
allowed the detachment to send and receive mes- 
sages from the other monitoring stations in the 
area, as well as other SIGINT organizations and 
commands, via the Criticomm communications 
system, was located in the hut. The hut was 
manned in shifts from a complement of twelve to 
eighteen officers and men from the Navy’s cryp- 
tologic element, known as the Naval Security 
Group (NSG). However, contrary to some asser- 



(U) However, when the Desoto patrol first 
was proposed for the waters in Southeast Asia, its 




(V) Pesoto mission van 
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mission was expanded First of all, the command- 
er, Seventh Fleet, wanted the patrol to move in 
closer than the original twenty-mile limit - as 
dose as twelve miles. Additionally, the Desoto 
mission was expanded to indude a broader col- 
lection of “all-source intelligence,” namely, pho- 
tographic, hydrographic, and meteorological 
information. 10 

(U) In mid-January 1964, COMUSMACV 
requested that the Desoto patrol scheduled for 
February (USS Radford, DD-446) be designed to 
provide the forthcoming OPLAN-34A program 
with critical intelligence regarding North 
Vietnam’s ability to resist its projected comman- 
do operations. However, in this case, the 
Radford’s mission was canceled so as to not inter- 
fere with OPLAN-34A missions planned for the 
first two weeks of February. 11 

(U) This is an important point, although a 
subtle one, for understanding the events of 2 to 4 
August. Inasmuch as there was an interworking 
between the two programs, and this remained a 
point of contention in later congressional hear- 
ings, as well as a source for speculation by the 
press, the Desoto mission remained merdy one of 
collection of intelligence which could be of use to 
the OPLAN-34A planners and commanders back 
in Danang and the Pentagon. There was no direct 
operational connection between the two pro- 
grams. They were managed under separate 
offices and were not known to coordinate mission 
planning, except for warnings to the Desoto 
patrol to stay clear of 34A operational areas. At 
least that was the understanding back in 
Washington. 12 

(U) In early July, General Westmoreland 
requested more intelligence on Hanoi’s forces 
which were capable of defending against an 
expanded OPLAN-34A program. Specifically, 
Westmoreland required intelligence on the DRV 1 s 
defenses in those areas targeted for July opera- 
tion - Hon Me, Hon Nieu, and Hon Matt Islands, 
as well as the area around the port of Vinh Son, 



south of the islands. In response, Admiral Sharp, 
CINCPAC, issued a new directive for a Desoto 
patrol whose purpose was “determining DRV 
coastal patrol activity.” 13 

(U) That the two missions might run up phys- 
ically against one another was a consideration at 
both MACV in Saigon and CINCPAC (and CINC- 
PACFLT) in Honolulu. But Westmoreland 
assured the navy commanders that as long as the 
Desoto patrol stayed within its schedule and area 
of operations, there would be no problem. 
Westmoreland added that all the Studies and 
Observations Group (SOG), which ran the 
OPLAN-34A missions, needed in the way of an 




and Desoto missions' alphabetic points denote Desoto 
mission start and stop positions. 

(Courtesy of Naval Historical Center) 
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alert, was thirty-six hours’ notice of any change. 
They could then adjust any planned 34A opera- 
tion. The navy accepted these reassurances from 
MACV. 14 

(3//3I} The first Desoto mission in the Tonkin 
Gulf region ran from February to March 1964. 
The USS Craig (DD-885) sailed near Hainan 
Island towards the Vietnamese coast and then 
turned back north towards Macao and Taiwan. 



| The North Vietnamese 

tracked the Craig as it swung south of Hainan 
Island, but had made no reaction even though 
they knew that it was a U.S. warship. It was 
uncertain to the Americans what the Vietn amese 
precisely knew of the Craig or its mission, 1 T 



- (0//SI) During this mission, there was a 
Naval Security Group DSU aboard whose task 
was to provide tactical intelligence to the Craig’s 
commander, as well as intercept unique commu- 
nications and electronic intelligence in reaction to 
the vessel’s presence. The Craig also received 
support from the SIGENT facilities in the region: 
the navy a nd air force COMINT sites in the 
Philippines | 

| No Vietnam-based sites were 

involved since the area of Craig’s mission barely 
touched on the DRVs territorial waters, and then 
only briefly, although it was suspected that the 



North Vietnamese navy at least once did report 
the Craig’s position. 17 

(U) However, there were two critical differ- 
ences between the Craig’s Desoto mission and 
that of the Maddox which followed it in late July 
and August: The Maddox would sail along the 
entire DRV coastline, while, at the same time, 
OPLAN-34A maritime miss ions against North 
Vietnamese coastal installations were being car- 
ried out. By July, the North Vietnamese were 
reacting aggressively to these raids, pursuing and 
attacking the seaborne commando units. 



■£ TS// Si)-In mid-July 1964, the JCS approved 
another Desoto mission, which would concen- 
trate on collecting intelligence on North 
Vietnam’s coastal defense posture. The USS 
Maddox, under the command of Captain John 
Herrick, loaded up its intercept van in the 

|The sixteen members 



of the DSU boarded, and the ship departed for the 
Gulf of Tonkin. The Maddox had received no 
additional instructions to its standard collection 
mission and apparently was not aware of specific 
OPLAN 34A missions in the area. 18 However, the 
Maddox was not on a purely passive mission. U.S. 
intercept sites in the area were alerted to the real 
reason for the Desoto missions, which was to 
stiniulate and record (my italics) North 



Vietnamese 

Support of the U.S. SIGINT effort. 1 ’' 



reactions in 



(TS//fl fy CINCPAC’s orders to Herrick were 
equally explicit and ambitious: locate and identi- 
fy all coastal radar transmitters, note all naviga- 
tional aids along the DRV’s coastline, and moni- 
tor the Vietnamese junk fleet for a possible con- 
nection to DRV/Viet Cong maritime supply and 
infiltration routes. 20 Whether these missions 
could be completed/ was questionable: the DSU 
was limited by its few positions and equipment in 
coDectihg such a large amount of communica- 
tions. The Maddox had been ordered by CENC- 
PAC to stay eight nautical miles from the North 
Vietnamese coastline, but only four miles from 

'(b) (1) 

(b) (3) -50 USC 403 
(b) (3) -18 USC 798 
(b) (3) -P.L. 86-36 
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07) Captain John J. Herrick Cleft), the on-site task 
force commander, and Commander Herbert Ogier, 
commanding officer oft he Mjcjdox 

any of its islands. 21 It would be attacks on these 
islands, especially Hon Me, by South Vietnamese 
commandos, along with the proximity of the 
Maddox , that would set off the confrontation. 

(U) Operations Plan 34A 
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(TS//SI) At the beginning of 1964, the 
Department of Defense, which had started its 
own program, assumed control of all of these 
covert missions. It merged its own project T I 

and organized 



all of the new missions under OPLAN 34A-64. 




pPLAN 34A originally was planned 

to last twelve months and was to be a program of 
selective intrusions and attacks of graduated 
intensity. The purpose of these actions was to 
“convince the Democratic Republic of Vietnam 
leadership that their continued direction and 
support of insurgent activities in the RVN and 
Laos should cease.” 24 



(T3//8I)”The OPLAN reflected the current 
American strategy of escalation of the war 
through graduated response. The U.S. estab- 
lished four levels of actions; each proceeding one 
was a qualitative and quantitative increase in the 
sensitivity of target selection and the intensity of 
the application of force. It began with harass- 
ment attacks and operations, whose cumulative 
effect, though labeled “unspectacular,” was to 
make Hanoi aware of them to the extent it would 
allocate forces to counter them. 25 If this approach 
foiled, then the next level - tagged as attritional 
- was to attack important military and civil 
installations whose loss could cause “temporary 
immobilization of important resources” which, in 
turn, might create or increase opposition 
amongst the North Vietnamese population to the 

government in Hanoi. The third level, termed 
punitive by the 34A planners, was meant to cause 
damage, displacement, or destruction of those 
facilities or installations considered critical to the 
DRV economy, industry, or security. To protect 
itself from further attacks would mean that the 
DRV would have to redeploy resources originally 
meant to support the war in the south to the 



needs of internal security. The planners admitted 
that the operations at this level would involve 
large enough forces that they would be necessari- 
ly overt. But the planners felt that these attacks 
could be attributable to the South Vietnamese. 26 

(TS//SI) T he final step of the plan was the ini- 
tiation 6f an aerial bombing campaign designed 
to damage the DRVs capacity to support the 
southern insurrection or cripple its economy to 
such an extent that it would realize the extent of 
its losses was not worth the support of the war in 
the South. At this point, the planners in 
Washington believed that Hanoi’s reaction to the 
attacks would be based on two factors: its will- 
ingness to accept critical damage to its own econ- 
omy by continuing supporting the war in the 
South, and the possible support of the People’s 
Republic of China. The plan did suggest that the 
communists would choose to continue to support 
the southern front, and it left open the possibility 
of further operations to offset the anticipated 
Chinese aid. 27 

(TS//9I)-The major operational components 
of OPLAN 34A were airborne operations that 
inserted intelligence and commando teams into 
North Vietnam, and maritime operations 
(MAROPS) which consisted of hit-and-run raids 
on coastal installations and facilities. These latter 
missions were known under the operational title 
Timberwork. The teams were made up of mostly 
South Vietnamese Special Forces, known as Luc 
Luong Dac Biet or Biet Rich, with some foreign 
mercenaries (mostly Chinese and Koreans) to 
crew the attack craft. The American involvement, 
though extensive in the planning, training, and 
logistics portions, was min imiz ed to achieve the 

usual “nonattribution” status in case the raids 
were publicized by the North. No Americans were 
allowed to participate in the actual raids. 

(U) Despite all of the planning, there was lit- 
tle confidence in the effectiveness of the OPLAN 
34A operations. CIA chief John McCone suggest- 
ed that they “will not seriously affect the DRV or 
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cause them to change their policies.” 28 Defense 
Secretary McNamara, when he returned from an 
inspection trip to South Vietnam in March 1964, 
described OPLAN 34A as “a program so limited 
that it is unlikely to have any significant effect.” 
The operations were described by other officials 
as “pinpricks” and “pretty small potatoes.” 29 

(U) The Johnson administration was dissatis- 
fied with the initial results of OPLAN 34A and 
sought a stronger approach. By June 1964, a new 
OPLAN, designated 37-64, had been developed 
jointly by the National Security Council, the JCS, 
and MACV. This new OPLAN called for a three- 
pronged approach to “eliminate to negligible pro- 
portions DRV support of VC insurgency in the 
Republic of Vietnam.” Three military options 
were put forward: ground action in Cambodia 
and Laos to eliminate VC sanctuaries and supply 
points, increased levels of 34A attacks on Hanoi’s 
coastal installations, and South Vietnamese and 
United States bombing of ninety-eight “preselect- 
ed” targets in North Vietnam. 30 

(U) If the commando raids had been such fail- 
ures, why did they continue to be staged? The 
truth is, Washington was anxious to support the 
shaky regime of General Khanh, who had suc- 
ceeded to the presidency of South Vietnam after 
Diem’s assassination. Until a better plan, such as 
37-64, could be implemented, then doing “some- 



thing,” even as ineffective as the raids, was the 
course Washington chose to follow. In spite of 
Hanoi’s gains for the first six months of 1964, if 
America’s determination to succeed could be 
communicated to Khanh, then the South 
Vietnamese might be reassured of the prospects 
for victory. 31 This was Washington’s policy: to 
prop up Saigon. Yet, this was a structure built on 
unsupported assertions. 

(T0//0I) The reality for Washington was that 
the increased tempo of maritime commando 
raids had only raised Hanoi’s determination to 
meet them head on. Through June and July 1964, 
NSA and the navy monitoring site in the 
Philippines reported that the conflict along the 
coast of North Vietnam was heating up. 
Communications about small boat actions, com- 
mando landings, and high-speed chases out at sea 
were intercepted and reported back to 
Washington. What the reports showed was a 
North Vietnamese navy emboldened to more 
aggressive reactions to incursions by the com- 
mandos from the south. For example, on 28 July, 
after an attack on the island of Hon Gio, DRV 
Swatow-class patrol boats pursued the enemy for 
forty-five nautical miles before giving up the 
chase. 32 Earlier, on 30 June, another patrol boat 
had taken potshots at two jet aircraft flying along 
the coast and claimed a hit. 33 
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(S//SI) By early June, Hanoi’s stepped-up 
defensive posture had registered in its radio traf- 
fic. On 8 June, NSA reported that the level of 
North Vietnamese tactical radio communications 
had increased almost fourfold during the early 
part of June from the previous period in May, 
probably in reaction to attacks along its coast. It 
also reported that DRV naval patrols now seemed 
to cover its entire coastline. 34 Clearly, Hanoi was 
determined to defend itself resolutely. Whether 
or not the Vietnamese believed that the 
Americans were preparing for a larger war was 
not important. What was critical was that the sit- 
uation along North Vietnam’s territorial waters 
had reached a near boil. 35 

(TS//SI) The SIGINT support to OPLAN 34A 
started at almost the same time as the operations 
began. Codenamed Kit Kat, the effort required 
that the then current ceiling of 660 cryptologic 
personnel in South Vietnam had to be raised. In 
February 1964, an increase of 130 personnel for 
Kit Kat was approved by CINCPAC. 36 The ASA 
moved personnel from the Philippines to Phu Bai, 
and the Naval Security Group added coverage of 
North Vietnamese naval communications to its 
mission at San Miguel in the Philippines. The Air 
Force Security Service units at Monkey Mountain 
near Danang increased their coverage of the com- 
munications of DRV navy and coastal surveil- 
lance posts. A small special SIGINT unit at Tan 
Son Nhut Airbase, known as the Special Support 
Group (SSG), was formed in late February to 
coordinate Kit Kat support between the intercept 
sites and the Studies and Observations Group. 

TS-//3I) A few last notes before we review the 
attacks. It will be necessary to limit the discussion 
to the role SIGINT played during the incident. 
Other evidential sources, such as that from the 
American ships’ own radar, sonar, and visual 
sightings, will be mentioned in passing simply 
because they are part of the story and cannot be 
altogether ignored. However, the brunt of the fol- 
lowing discussion will center on the SIGINT evi- 
dence because of its critical role in convincing the 



Johnson administration that the attack actually 
occurred. 

(S//SIT Besides the NSG detachment aboard 
the Maddox (USN-467N), other SIGINT ele- 
ments that were involved in the events of the next 
three days included a Marine SIGINT detach- 
ment (USN-414T), collocated with the Army 
Security Agency intercept site at Phu Bai (USM- 
626J), and the NSG site at San Miguel, 
Philippines (USN-27), which also had a Marine 
SIGINT contingent, but the latter was not desig- 
nated separately as was the Marine group at Phu 
Bai. It would be the intercept and reporting by the 
Marine unit at Phu Bai and the navy site in the 
Philippines which would prove critical to the 
events in the Gulf of Tonkin. 




-(W 1 



(b)(1) 

(b) (3) -50 USC 4 '33 
(b) (3) -18 USC "7 98 
(b) (3) -P.L. 8C-36 
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(3//3I) A large number of the reports by the 
various field sites and NSA were issued contem- 
poraneously with the events themselves. A few of 
these would be cited in the various after-action 
analyses and postmortems that attended the Gulf 
of Tonkin. However, many more field transla- 
tions and reports based on the intercept during 
the period of the incidents would be issued as late 
as two to four days after the crisis. The reason for 
the apparent delay was that the request from NSA 
for ALL intercept came only on 7 August. 3 ® 

(C//3I)"Because of the nature and enormous 
amount of the SIGINT evidence used here for the 
veiy first time in discussing the Gulf of Tonkin 
crisis, we will need to present it in a format which 
will highlight that information. Rather than try to 
retell the story all at once and incorporate the new 
evidence into the narrative, which could be over- 
whelming, especially to those readers not inti- 
mately familiar with the events of 4 August, a dif- 
ferent tack will be used. We will break down the 
events into their separate days. First, we will 
review the details of the known engagement of 
the afternoon of 2 August. While there is no con- 
troversy surrounding this fight - at least there is 
no question that it occurred - there is an impor- 
tant point to draw from it: that is, the North 
Vietnamese communications profile during a 
naval combat engagement was revealed. For ease 
of reference, we shall refer to this communica- 
tions profile as the “command and control com- 
munications and intelligence” system or C3I. This 
is a functional description used widely in the 
intelligence and defense communities to describe 
the process whereby the individual elements of 
intelligence (information/ intelligence), com- 
mand and control (interaction by command 

(b) (1) 

(b) (3) -50 USC 403 

(b) (3) -18 USC 798 

(b) (3) -P.L. 86-36 



authorities), and communications (communica- 
tions links among all operating elements and 
units) are combined in military operations. 

(U) After looking at the “uneventful” day of 3 
August, we will consider the “official” version of 
the engagement of 4 August. Although, as we 
progress through the narrative, we will consider 
the problems with the various other pieces of evi- 
dence which support the contention that an 
attack occurred, die emphasis will be on the SIG- 
INT “clinchers,” that is, those reports that con- 
vinced the Johnson administration that an attack 
had occurred. These items will be presented when 
and how they appeared to the participants. 

(U) Finally, we will go back over the clinching 
SIGINT “evidence” of 4 August and illustrate 
what problems exist with the individual pieces. 
In this section, the entire scenario of what was 
reported and, more importantly, what was not 
reported, will be considered. We will review 
closely the technical problems with the two criti- 
cal SIGINT reports which prop up all of the other 
evidence of an attack by the North Vietnamese. In 
this approach we will consider how the product 
was developed and the serious problems in trans- 
lation, composition, and reporting of the infor- 
mation. 

- (C//SI ) One last item. For purposes of clarity, 
all time references will be marked either Zulu 
time (“Z,” or Greenwich Mean Time) or Golf (“G,” 
or Zulu +7), which is the time zone for the Gulf of 
Tonkin. While the actual time of the incidents 
was in local, or Golf time, SIGINT reports were 
issued in Zulu time. This is done because of the 
worldwide nature of SIGINT reporting. The use of 
Zulu time allows for a consistent and universal 
benchmark for analysts and recipients of the 
intelligence. To further confuse the issue, the U.S. 
Navy used Hotel time (Zulu +8) in all of its mes- 
sages, which is carried over into its history of the 
Vietnam War. Then there are the events in 
Washington, D.C., and NSA HQ, Fort Meade, 
MD, which are in the Eastern time zone, or 
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Romeo (“R,” or Zulu-5 hours). The latter times 
will be notated “EST” for Eastern Standard Time. 
All times will be in given in the military twenty- 
four-hour clock. So, all “P.M.” times after 1200 
hours can be determined by subtracting 1200 
from the time: e.g., 1700 hours equals 5:00 P.M. 
Also, it must be remembered that events in the 
Gulf of Tonkin occurred west of the international 
date line, so that certain events in the region were 
occurring the next day in terms of Washington’s 
time. For example, if something happened at 
1500 hours Zulu, it is reflected as 2200 hours 
Golf, 2300 hours Hotel and 1000 hours Romeo of 
the same day. However, a two-hour advance in 
Zulu time, that is, 1700 hours on 4 August, means 
0000 hours Golf and 0100 hours Hotel time on 5 
August, while Washington will be 1200 hours on 
4 August. For ease of reference, the reader can 
observe that there is a twelve-hour difference 
between Washington and the Gulf of Tonkin. 

(U) Round One: The 2 August Battle 

(S//SI j-It all began with the fireworks of the 
night of 30/31 July 1964, when South Vietnamese 
commandos struck at Hon Me Island (l9 2l'N, 
105 56 'e), located off the central coast of North 
Vietnam. At first the commandos tried to land 
and attack a radar station, but were driven off. 
The raiders then stood offshore in their boats and 
peppered the installation with 
machine gun and small cannon 
fire. At the same time, two other 
commando boats bombarded Hon 
Ngu Island (1848 'n, 105°47'e) 
near the port of Vinh. During the 
attack, the Maddox had drawn off 
from the scene as required by its 
orders to stay well out at sea dur- 
ing the night. On the morning of 
31 July, as the Maddox made for 
its patrol station near the coast, 

Captain Herrick observed the 
retreating commando boats 
(called “Nasties” after the manu- 
facturer of their boat, “Nast”) 



heading south. Communist communications 
were intercepted by the navy monitoring site in 
the Philippines, which reported the vain attempts 
by their patrol craft to catch the “enemy.” 39 

- (S//SB -On the morning of 1 August, the ASA 
site at Phu Bai, Republic of Vietnam, monitored a 
DRV patrol boat, T-146, a Swatow-class patrol 
craft communicating tracking data on the 
Maddox to another Swatow. At the time, 
between 0700G to 0730G (0030Z), the Maddox 
was located nine miles southeast of Hon Me 
Island moving northeasterly. The Swatow-class 
patrol craft was one of a group supplied by the 
People’s Republic of China. It was a fairly large 
patrol craft displacing sixty-seven tons. It had a 
top speed of forty-four knots and a cruising speed 
of twenty knots. It was armed with two 37-mil- 
limeter (mm) antiaircraft (AA) gun mounts, two 
20-mm AA mounts, and carried up to eight depth 
charges. This armament limited the Swatow’s 
role to countering other small vessels. The 
Swatow carried the Skin Head surface search 
radar. The Swatows often worked in tandem with 
P-4 torpedo boats, acting as communications 
relays between North Vietnamese naval com- 
mand centers and the P-4s, whose long-distance 
communications capability was limited. This was 
a role that the Swatows filled all during the next 
few days’ action. 40 




(17) Swatow-cUss patrol boat 
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(S//B I)-The T-146 patrol craft also ordered 
the other craft to turn on its “equipment,” which 
probably referred to its Skin Head radar. 
However, the Maddox did not intercept any emis- 
sions from the Swatow’s radar. The North 
Vietnamese boats referred to the track as the 
“enemy”; the equation of the term to the Maddox 
was made by Phu Bai. 41 

(S//SI) Shortly after 2300G (1600Z) on 1 
August, the naval intercept site in the Philippines 
reported that the DRV naval base at Ben Thuy 
(18°39 / N, 105°42 / E) had informed an unidentified 
entity, possibly the T-146 patrol boat, that it had 
been “DECIDED TO FIGHT THE ENEMY 
TONIGHT [1 Group unreadable] WHEN YOU 
RECEIVE DIRECTING ORDERS.” The base also 
queried the boat if it had received the “enemy’s” 
position change from another naval entity, possi- 
bly an authority on Hon Matt Island (18°48 / N, 
105° 56'E). 42 The Maddox was informed of this 
intercept. A half hour after receiving the most 
recent report, Captain Herrick informed Seventh 
Fleet and CENCPAC that he had terminated the 
Desoto mission because of indications of an 
imminent attack and was now heading east out of 
the patrol area at ten knots. These indications of 
an attack were from Vietnamese communications 
intercepted by the two field sites, as well as the 
NSG detachment aboard the Maddox. 
Throughout the rest of the day, these stations 
would monitor the North Vietnamese ship-to- 
ship and ship-to-shore manual morse and voice 
communications nets. They intercepted the all- 
important vectoring information, the orders from 
shore commands, and all the tactical communica- 
tions. However, the DRV boats made no hostile 
moves against the Maddox that day. 

(6/ /SH Throughout the night of 1/2 August, 
according to the intercepted communist mes- 
sages, the North Vietnamese continued to track 
the destroyer as it remained east of Hon Me 
Island, some twenty-five miles offshore. Still, 
nothing had happened that night, and so the 



Maddox returned to its patrol line off the DRV 
coast on 2 August. 

(3//SI) During the early morning, the 
Maddox, which was heading along the northern 
track of its patrol area, was notified of further 
North Vietnamese tracking of its movements. The 
North Vietnamese naval motor torpedo boat 
squadron stationed at Port Wallut command was 
receiving the tracking. A coastal surveillance 
radar station on Hon Me may have been ordered 
to begin tracking the destroyer “continuously.” (It 
is possible that this station had been inactive dur- 
ing the previous day so as to deny any informa- 
tion on its operation parameters from the 
American monitoring effort.) 43 

(T S // S I) More ominously for the Maddox, the 
communists also had ordered P-4 patrol torpedo 
boats (MTB) and Swatow-class patrol boats to 
begin concentrating near Hon Me Island later in 
the morning. 44 These patrol toipedo boats had 
been supplied by the Soviet Union. The P-4 boat 
displaced twenty-five tons. Its top speed was fifty 
knots; its cruising speed was thirty knots. It had 
two twin 12.7-mm machine-gun mounts and two 
eighteen-inch torpedo tubes. The P-4 boat also 
carried a Skin Head surface search radar. The 
reporting from the American intercept sites con- 
strued the Vietnamese boat concentration near 
Hon Me as a prelude to an attack on the 
Maddox. 45 

( 8 // 6 I) NSA feared that an attack on the 
Maddox was in the offing. At 1002G (0302Z) on 
2 August, NSA sent an urgent message to a num- 
ber of commands and sites in the region warning 
of a possible attack. Included in this message was 
CINCPACFLT, MACV, and the Commander, 7th 
Fleet. Ironically, the Maddoxvtas not on distribu- 
tion for this message; the DSU would have 
received the message, but it was not addressed 
either. The gist of the message was simple: 
repeated attacks by “enemy vessels” on Hon Me 
Island had led Hanoi to make preparations to 
repel any further assaults. NSA added that 
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boat 



“...THE INDICATED SENSITIVITY ON PART OF 
DRV AS WELL AS THEIR INDICATED PREPA- 
RATION TO COUNTER, POS[SI]BLE THE DRV 
REACTION TO DESOTO PATROL MIGHT BE 
MORE SEVERE THAN WOULD BE OTHER- 
WISE BE ANTICIPATED.” The problem with the 
Maddox not receiving these critical warnings 
would not be resolved until after the first attack. 46 

■ (TG//9I} Shortly before noon, at 1144G 
(0444Z), the Marine SIGINT group attached to 
the ASA site at Phu Bai, RVN, intercepted a mes- 
sage from the T-142 Swatow-dass patrol boat to 
the DRV naval base at Port Wallut which stated 
that “[WE] HAVE RECEIVED THE ORDERS. 
[T]146 AND [T]142 DID USE [1 Group unread- 
able] HIGH SPEED TO GET TOGETHER [PAR- 
ALLEL] WITH ENEMY FOLLOWING 
LAUNCHED TORPEDOES.” 47 The Phu Bai sta- 
tion issued a Critic, short for a critical message, 
that alerted all relevant commands, and the 
Maddox, of the planned attack. In the same 
report, the Phu Bai site added that four boats, T- 
142, T-146, T-166, and T-135, had been engaged 
in tracking and following an “enemy” which “is 
probably the current Desoto mission.” The final 
paragraph of the message added that the DRV 
naval facility’ in Port Wallut was acting as the 
shore-based “coordinator/director” for the sur- 
veillance of the probable Desoto vessel. 48 



-fO//SIt About a half hour later, at 1218G 
(0518Z), another Marine SIGINT detachment 
stationed with the navy monitoring station at San 
Miguel, Philippines, intercepted the same mes- 
sage. This later intercept is not unusual; it meant 
that the Vietnamese were retransmitting the mes- 
sage to ensure its reception. However, this inter- 
cept was reported in a different manner than Phu 
Bai’s version. The second version was reported as 
a translation instead of a report. In essence, this 
meant that the actual intercept was reported, and 
not a restatement of its contents. Therefore, some 
interesting items of intelligence, which were 
missing from the first report, were included. 

4 S//9 F) First of all, the second version con- 
tained what is known as the “file time” of the DRV 
message, that is, the time when the message was 
entered into a log prior to its transmission by the 
Vietnamese radio operator on the T-142. In this 
case, a file time of 1113G was noted. This time ref- 
erence tells us that there was a half-hour delay 
between the receipt of the message from the orig- 
inator and the initial transmittal of the “attack” 
message (1144G/0444Z), as well as an hour’s dif- 
ference in the second intercept (1218G/0518Z). 
The differences are interesting for two reasons. 
First of all, if the intercept times from both 
American sites reflect the beginning of the actual 
intercept of the Vietnamese transmission, then 
the half-hour difference suggests that the “attack” 
message was sent more than once. Why more 
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than once? It is possible that Port Wallut had not 
received the first transmission from T-142, 
although the reports from both Marine sites 
imply that the message was received each time. 
Secondly, the lag between the file time and the 
actual transmission time by the Vietnamese, if 
figured from the American time of intercept, sug- 
gests that the Vietnamese were having difficulties 
in transmitting messages in a timely manner. 
This delay, as we shall see, becomes an important 
element in determining the DRV intentions. 

(U) At about this time, the three torpedo boats 
had arrived at Hon Me Island. The Maddox, 
which was steaming on a northeast heading away 
from the island, had observed visually the arrival 
of the three boats. Shortly afterwards, the two 
Swatows were seen by the Maddox in the area of 
Hon Me. The five North Vietnamese boats now 
were concentrated at the island. 

(S//SI)T he “attack” message was followed up 
by another message, this time from Port Wallut to 
T-146, which was intercepted at 1306G (0612Z) 
by the Marines in the Philippines. The message 
instructed T-146 (and probably T-142) to “LEAVE 
135 AND TURN BACK TO [THE PATH] OF THE 
ENEMY.” The “135” that T-146 was told to leave 
turns out not to have been an individual boat, as 
earlier reported by the Marines, but the squadron 
designator for the three P-4 torpedo boats which 
would take part in the upcoming attack. These 
three boats made up the Section 3 of Squadron 
135. 

(8//QI) The five boats, which included the P-4 
boats, T-333, T-336, and T-339, departed Hon 
Me Island at about 1300G, quite possibly on their 
way to seek out the Maddox. 49 Within the next 
hour a set of apparently conflicting orders was 
sent to the Vietnamese boats. At 1409G (0709Z), 
Port Wallut notified both Swatow craft that the 
“enemy” was a large ship bearing 125 degrees 
(from My Due?) at a distance of nineteen miles at 
a speed of eleven knots on a heading of twenty- 
seven degrees. This put the target on a north-by- 



northeast heading, which matched that of the 
Maddox. The same message also included a gar- 
bled phrase to “THEN DETERMINE,” but it is 
unclear what this phrase meant. 50 However, 
according to Edwin Moise, the North Vietnamese 
said that Section 3 received its order to attack the 
destroyer at 1350G. 51 Since the file time of the 
message from Port Wallut was 1400G, this may 
have been the “attack” message. 

( 8 //Si )-However, there is a complicating fac- 
tor. At 1403G (0703Z), just six minutes earlier, 
the site at San Miguel had copied a message from 
Haiphong to the two Swatow patrol boats which 
told them to “ORDER 135 NOT TO MAKE WAR 
BY DAY.” Furthermore, the message added that 
all of the boats were ordered to head towards 
shore (though an intercept of the same transmis- 
sion by the Marines at Phu Bai ordered the boats 
first to pretend to head towards shore), and then 
return to Hon Me Island. 52 Although this mes- 
sage was sent shortly after 1400G (0700Z), it con- 
tains a file time of 1203G (0503Z). This means 
that this message, which constitutes an order to 
recall the boats, was originated some two hours 
before the order to attack was transmitted! A sec- 
ond intercept of the same message added that T- 
146 was supposed to order the recall of Squadron 
135’s torpedo boats. 53 According to Moise, the 
North Vietnamese claimed that a recall order was 
sent after the attack message, but T-146 never 
relayed it in time. 54 

- (D//GI) This conflict in orders by command 
elements from Port Wallut and Haiphong indi- 
cates that there was a loss of control of the situa- 
tion. It further suggests that the DRV naval 
authority in Haiphong had never wanted the 
attack to occur, at least not during the day, when 
conditions were not favorable for surprising the 
Maddox. Since the boats continued their attack 
on the destroyer, it appears that the recall order 
was ignored. The deciding factor for the 
Vietnamese boat commander may have been the 
much earlier file time of the recall order; the 
attack message with the more current file time 
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probably superseded everything else in his deci- 
sion. 

“(9//SI) At around 1400G, the Maddox's radar 
detected the approach from the southwest of the 
three P-4 torpedo boats. Forewarned by the SIG- 
INT of the Vietnamese intentions to attack, the 
Maddox then started turning eastward, then to 
the southeast and increased its speed from eleven 
to twenty-five knots. The North Vietnamese boats 
initially may have missed the turn to the south- 
east by the Maddox. They probably had been 
visually tracking the American vessel. 55 There is 
no SIGINT evidence that their Skin Head radars 
were active, though the Vietnamese claimed the 
boats used it. Pictures from the action appear to 
show the radar masts still upright and not low- 
ered in a combat position. By the time the 
Vietnamese did react to the Maddox' s change in 
course, they found themselves in an unfavorable 
attack position. They were chasing the Maddox 
from its rear starboard, that is, from the north- 
west, which meant it would take some time, even 
with a near twenty-knot advantage in speed, to 
achieve an optimal firing position for their torpe- 
do run - perhaps as long as thirty minutes before 
they could execute a turn on an attack heading. 



By 1430G, Commander Ogier ordered the 
Maddox to go to general quarters. 

(U) At about 1440G (0740Z) the Maddox sent 
a flash precedence message to various commands 
in the Pacific that she was being approached by 
high-speed craft with the intention of attacking 
with torpedoes. Herrick announced that he would 
fire if necessary in self-defense. 56 He also request- 
ed air cover from the carrier Ticortderoga, which 
was then 280 miles to the southeast. Four F-8E 
Crusaders from the carrier, already aloft, were 
vectored to the Maddox. The destroyer Turner 
Joy (DD-951) was ordered to make best speed to 
the Maddox. 

(U) For the next twenty minutes, the chase 
continued. The Vietnamese boats inexorably 
closed the gap between themselves and the 
destroyer. At 1500G, Captain Herrick ordered 
Ogier’s gun crews to open fire if the boats 
approached within ten thousand yards. At about 
1505G, the Maddox fired three rounds to warn off 
the communist boats. This initial action was 
never reported by the Johnson administration, 
which insisted that the Vietnamese boats fired 
first. 



(V) uss 

Ticonderogi 
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( \J) 2 August naval action. Note the use of Hotel time 
(Z+8/G+1). (Courtesy of Naval Historical Center) 




(10 P-4 torpedo boat urxler fire from Maddox, 2 August 



(U) A few minutes later the 
Maddox resumed fire. Through the 
shellfire, the DRV boats bore in on the 
Maddox. But their attacks were inef- 
fective. Within fifteen minutes of 
Maddoxes first salvo, jets from the car- 
rier Ticonderoga had arrived and 
attacked the Vietnamese boats, leav- 
ing one dead in the water and the 
other two damaged. As for the 
Maddox, she was unscathed except for 
a single bullet hole from a Vietnamese 
machine gun round. 

(U) There would continue to be 
confusion over losses for some time. 

The DRV claimed that two aircraft had 
been shot down. In reality, one of the 
navy’s jets had sustained wing damage 
during its maneuvering for the attack 
and was escorted out of the area by 
another jet. Both aircraft departed the 
area under full power, the black 
exhausts trailing from their engines 
probably appeared as 
battle damage to the 
Vietnamese sailors. 57 
The damaged navy jet 
would be forced to land 
at Danang. 

(U) As for the attack- 
ing com munis t vessels, 
eventually all three 
struggled back to their 

bases. The one craft, T- 
339, thought to be dead 
in the water and claimed 
to have been sunk by the 
Americans, and, inciden- 
tally, initially reported 
sunk by the Vietnamese as well, actually restarted 
its engines and managed to limp back to shore. 
On board were four dead and six wounded 
Vietnamese sailors out of a crew complement of 



twelve. However, the other Vietnamese boats 
were unaware of what had happened and report- 
ed T-339 as sunk, and would continue to do so for 
days afterwards. 58 
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(S//SI) At 1630G (2330Z), the Vietnamese 
patrol boat, T-142, received orders to concentrate 
back at a location north of Hon Me Island, and to 
make contact with another possible Swatow- 
class patrol boat, T-165. T-146 also received 
orders from Haiphong to send two boats out and 
help the P-4s of Squadron 135 to return. 59 Two 
days later, on the afternoon of 4 August, T-146 
would report to Haiphong the damage to the 
boats during the attack. T-333 had been hit three 
times and suffered scattered damage to its water 
pipes and lifeboat. Its auxiliary engine had been 
hit and oil pressure was low, suggesting a leak. 
Still, the boat was assessed as being “lightly dam- 
aged.” On the other hand, T-336 was described as 
being “heavily damaged with many holes.” Its fuel 
oil was contaminated, possibly by sea water, and 
the barrel of one of its deck guns was ruined. 60 
The boat’s crew had suffered at least two wound- 
ed as well. The status of both boats and T-333’s 
crew is important to remember when we look at 
the events of the later evening of 4 August. 

(U) In Washington, the reaction to the attack 
was relatively subdued. Since no Americans had 
been hurt, President Johnson wanted the event 
downplayed while a stem note of protest was sent 
to the North Vietnamese. (Ironically, this mes- 
sage was the first diplomatic note ever sent to 
North Vietnam by the United States.) The presi- 
dent had said that we would not “run away”; yet 
we were not going to “be provocative.” However, 
Hanoi was to be informed in no unambiguous 
terms that any more unprovoked actions would 
entail “grave consequences.” 61 

(0//0I) ~ T he lack of any reprisal was surpris- 
ing, especially since freedom of navigation was 
one of the official reasons for the Desoto mis- 
sions. However, it is likely that there were miti- 
gating factors which caused Washington to pause. 
Secretary of Defense McNamara was incorrect to 
claim that the Vietnamese had fired first. 62 At the 
same time, the Johnson administration had seri- 
ously miscalculated the reaction by Hanoi to the 
OPLAN 34A missions. It had never considered 



that the communists might correlate the attacks 
with the presence of the American destroyer. 63 
NSA, monitoring the increasing aggressiveness in 
DRV naval communications, had seen the possi- 
bility and had warned everyone, except the 
Maddox. 



( S // 8 I) Furthermore, Washington, through 
the intercept of the DRVs naval communications, 
had seen the confused set of orders sent to the 
boats, which suggested that Hanoi had lost con- 
trol of the situation. McNamara would state, “We 
believed it possible that it had resulted from a 
miscalculation or an impulsive act of a local com- 
mander.” 64 It seemed that everyone was trying to 
defuse the crisis. 



7S//3B- DIRNSA, co ncerned about possible 
reactions 



aggressive 



Jordered all the sites in the region to 



maintain “extreme collection, processing, and 
reporting vigilance on part of all with reporting 
accomplished LAW [in accordance with] estab- 
lished procedures and at preced ence approp riate 
to activity, especially in regards tc r eac- 

tion.” 65 A SIGINT Readiness Level Bravo Lantern 
was declared. Under this readiness level, eight 
field sites were tas ked bv NSA to monitor for any 



North Vietnamese 



reaction to the 



patrols. The brunt of the intercept and reporting 
was handed to the navy at San Miguel and the 
Army and Marine missions at Phu Bai. 66 



(U) The Pentagon was not going to wait 
around for smother incident to happen, either. 

Plans were put into motion to augment U.S. 
forces in the region, including deployment of 

United States Air Force combat aircraft to the 
Philippines and the dispatch of the carrier 
Constellation to join the Ticonderoga. A second 
destroyer, the Tigyier Joy, already had been dis- 
patched to rendezvous with the Maddox. CINC- 
PAC ordered both ships back to the patrol area, 
seeing it “in our interest that we assert right of 
freedom of the seas.” CINCPACFLT issued new 
rules of engagement for the next three days which 



(b)(1) 

(b) (3p-50 USC 103 
(b) (3) -18 USC IBn 
(b) (3&P.L. 86-36 
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which had just arrived to 
reinforce him, was out of 
action indefinitely. 69 

(U) At the close of 2 
August, the North 
Vietnamese boats were 
hiding in coastal waters 
caring for their casual- 
ties and waiting for 
orders as to what to do 
next. The Maddox was 
joined by the Turner 
Joy out at sea, and both 
were being replenished 
with ammunition and 



allowed both ships to approach the North 
Vietnamese coast as close as eight nautical miles 
and four miles from its islands. The two destroy- 
ers were ordered to arrive at their daylight patrol 
point about one hour before dawn. One hour 
before sunset they were ordered to retire east out 
to sea during the night. 67 

-fS} If the Pentagon brass was anxious to insert 
its ships into harm’s way, Captain Herrick was 
more cautious. In an after-action report transmit- 
ted that evening, which reviewed the attack and 
the successful American defense, he added a 
warning: the “DRV HAS C[AS]T DOWN THE 
GAUNTLET AND NO[W] CONSIDERS ITSELF 
AT WAR WITH US.” He added a concern that the 
DRVs torpedo boats, especially at night, could 
hide and then approach the destroyers with little 

warning. 68 He stated that the Maddox and the 
Turner Joy, with their five-inch guns and top 
speed of thirty-three knots, were inadequately 
armed for defense against such boats. He sug- 
gested that the Desoto patrol would be safe only 
with a cruiser and continuous air cover. One last 
item was reported by Captain Herrick: the 

Maddox ' s long-range, air search radar (AN/SPS- 
40) was inoperative, and the fire control radar 
(AN/SPG-53) belonging to the USS Turner Joy, 



supplies while under way. They had been ordered 
to return to the coast at daybreak. 

(S//SI) - The SIGINT community could be 
proud of its efforts during the day. The field sites 
and NSA had intercepted, processed, and report- 
ed North Vietnamese naval communications in 
such a rapid and clear way that everyone in the 
Pacific command was aware of the approaching 
attack. It also had provided the information to 
Washington that suggested that Hanoi’s grip on 
events was less certain than was expected. At the 
same time, by monitoring the DRVs naval com- 
munications, the cryptologists had developed a 
picture of the command and control elements 
prior to an attack: extensive tracking by coastal 
observation posts; the identification of a target 
and the communication of an attack command; 

and the use, if limited, of radars in locating the 
target. The Maddox had never been explicitly 
named as the target of the attack; in fact, there 
was just the notation of an “enemy”; however, the 
analysts at Phu Bai, San Miguel, and inside the 
Desoto hut had correlated the North Vietnamese 
tracking with the American ship. The Maddox 
had been fixed in the minds of the American cryp- 
tologists as an “enemy vessel” to the North 
Vietnamese; they would be on the lookout for 
possible new attacks. The question was, though, 
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was Hanoi spoiling for another round with the 
U.S. Navy? 

(U) Interlude: Maneuvers and 
Watchfulness, 3 August 

(U) On 3 August, President Johnson made 
public the instructions he had issued to the Navy 
earlier. He said that the patrols would continue in 
the Gulf of Tonkin, that they would be reinforced 
by another destroyer with combat aircraft over- 
head. He added that if attacked in international 
waters, U.S. forces would attack any force with 
the intention of not just driving it off, but of 
“destroying it.” 

(U) At the same time, the State Department 
publicized the note it had sent Hanoi protesting 
the attacks. It concluded with the words “The 
United States Government expects that the 
authorities of the regime in North Vietnam will be 
under no misapprehension as to the grave conse- 
quences which would inevitably result from any 
further unprovoked military action against the 
United States forces.” 70 

(U) Despite the increased North Vietnamese 
vigilance and the observed sensitivity to 
American and South Vietnamese naval activity in 
Hanoi’s territorial waters, COMUSMACV went 
ahead with an OPLAN 34A mission scheduled for 
the night of 3-4 August. In accordance with an 
earlier agreement, the Maddox and Turner Joy 
were advised to avoid sailing in the area bounded 
by the 17th and 18th parallels. A 34A mission 
against the radar site at Vinh Son (17 57 y N, 
lOb^o'E), which involved a four-boat task group, 
set sail at 1510G (0810Z) on 3 August. At mid- 
night it shelled the radar station. One of the boats 
broke off and attacked a nearby security post and 
was pursued for a short distance by a North 
Vietnamese patrol craft. 

(U) By mid-morning of 3 August the two 
destroyers were heading to their patrol station, 
which was about 100 miles northwest of the new 



34A mission area. They expected to be on station 
by early afternoon. However, this location kept 
them in the area of the island of Hon Me, which 
was the focus of DRV naval activity during the 
ensuing day and night. 

(3//3I) Meanwhile, the North Vietnamese 
were concerned with the salvage of their damaged 
boats. Just past midnight on 3 August, T-142 and 
T-146 were in the area of Hon Me Island trying to 
contact another Swatow, T-165, as well as find 
the missing boats from Squadron 135. At 0300G 
(2000Z), T-142 sent an after-action report to the 
T-146 (for relay to Port Wallut), which highlight- 
ed the previous afternoon’s combat. It included a 
chronology of the various actions the squadron’s 
boats carried out from 0935G to 1625G when they 
attacked the Maddox. 71 

(G//QI j - Even by mid-afternoon of 3 August, 
naval headquarters in Haiphong still did not 
know where the torpedo boats were and demand- 
ed that the Swatows inform it when they knew 
their situation. 72 However, the SIGINT site at Phu 
Bai misconstrued this search and salvage activity 
as a prelude to a potentially dangerous concen- 
tration of enemy boats. It issued a Critic at 1656G 
(0956Z), which placed six DRV patrol and torpe- 
do boats near Hon Me Island. 73 However, the 
report was wrong in that it identified the 
squadron reference “135” as a boat, as well as 
locating the two torpedo boats, which, at the time, 
were still missing. The ominous concentration of 
boats simply was not occurring. However, this 
incident revealed how tense the situation had 
become. It also illustrated a precedent by the field 
site at Phu Bai for misinterpreting Hanoi’s inten- 
tions. 

(TS//SI) Almost as soon as the two destroyers 
arrived on station south of Hon Me Island in early 
afternoon, they were shadowed by a DRV patrol 
boat which tracked them using its Skin Head 
radar. 74 The tracking continued through the 
afternoon into early evening. The Haiphong naval 
authority and the Swatow boats near Hon Me 
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exchanged position information on the two 
destroyers as they moved from the north to south 
and back north on their patrol. 75 At one point, 
another Swatow, T-379, erroneously identified as 
an SO-1 class subchaser, was ordered to go out 
and observe “different targets,” which probably 
referred to the American ships. 76 The North 
Vietnamese also detected aircraft in the area of 
the Desoto patrol, though it is unclear from their 
report whose aircraft these were. However, the 
commander, 7th Fleet, had ordered a continuous 
combat air patrol accompanying the two destroy- 
ers. The navy jets flew their cover to the east of 
the Desoto position so as to avoid infringing on 
DRV air space. 77 

-(G//SI) By early evening, Haiphong ordered 
T-142 to track the Desoto patrol. T-379, which 
earlier had been instructed to observe the Desoto 
patrol, had sailed to Hon Ngu Island (l8°48 y N, 
105°47 / E). It had arrived at 2250G (1550Z) and 
reported that the situation at sea was “peace- 
ful.” 78 

■fStT-142 took up a position to the north of the 
two destroyers and stayed with them, reporting 
the location of the American ships to Haiphong 
either directly to naval HQs or relaying reports 
through T-146. Both U.S. ships reported being 
followed from the north at a distance of thirty- 
eight miles by a DRV patrol craft using its Skin 
Head radar. By this time, 2252G (1552Z), the 
Desoto patrol was heading southeast out of the 
patrol area as had been instructed earlier. 79 
Tracking of the destroyers ended soon after when 
they were out of range. 

-4 S// S H Meanwhile, the main concern of the 
DRV navy was the recovery operation for the 
boats damaged during the 2 August attack. Late 
in the night of 3 August, Haiphong informed T- 
142 that the salvage tug Bach Dang would soon 
leave Haiphong (it was not dear from the inter- 
cept if the time of departure was 0100G, 4 
August/l800Z, 3 August) and head towards Hon 
Me Island to tow T-333 and T-336 back to 



Haiphong or Port Wallut, which was their unit’s 
base. 80 It was expected that the tug would arrive 
at about noon on 4 August. Meanwhile, T-146 was 
ordered to stay with the two damaged boats from 
Squadron 135 and report their position and sta- 
tus. 

(U) So ended 3 August. That evening’s 34A 
raid on Vinh Son was protested by Hanoi. In its 
complaint, it accused the two destroyers of partic- 
ipating in the raid. Although the DRVs own 
tracking of the two ships had ceased some hours 
before, and they could not be certain of where the 
American ships were, the Vietnamese had 
inferred anyway that the Desoto ships were 
involved. It may not have been the right conclu- 
sion, but the Vietnamese believed it. Washington 
still did not think that Hanoi would act. 

(U) Round 2: “Everything in Doubt”- 
The 4 August Action 

-(B//3I)"At 0600G (2300Z) on the morning of 
August 4, the two destroyers turned westward 
towards the DRV coastline to begin their day’s 
patrol. By 1300G (0600Z) they returned to their 
duty station off the coast of North Vietnam near 
Thanh Hoa (20°08 / N, 105°30 , E), known as point 
“Delta,” where they began to steam to the south- 
west along the Vietnamese coast. The air cover 
from the Ticonderoga again was overhead and to 
the east. An hour later, the Maddox reported that 
it had another shadow, this time fifteen miles to 
the east. The identity of this shadow cannot be 
determined. 

(5 // S H - The North Vietnamese had been 
tracking the Americans. Haiphong informed T- 
142 at 1610G (0910Z) that they had located the 
destroyers near 19°36 / N and 106°19 y E traveling on 
a southwest heading. However, this last position 
of the two ships had been acquired by the North 
Vietnamese some two and one-half hours earlier 
at 1345G (0645Z). 81 At approximately 1600G 
(0900Z), following his operational directive from 
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CINCPAC to be clear of the patrol area by dark, 
Herrick ordered the patrol to head due east. 

(S//0I) At 1115Z (1815G), the naval SIGINT 
detachment aboard the Maddox received a Critic 
from the Marine SIGENT unit collocated with the 
ASA at Phu Bai, which stated, “POSS DRV 
NAVAL OPERATIONS PLANNED AGAINST 
THE DESOTO PATROL TONITE 04 AUG. 
AMPLIFYING DATA FOL.” 82 Twenty-five min- 
utes later, Phu Bai issued a follow-up report at 
1140Z (1840G) which reported, “IMMINENT 
PLANS OF DRV NAVAL ACTION POSSIBLY 
AGAINST DESOTO MISSION.” 83 The report 
went on to add that three DRV boats, T-142, T- 
146, and T-333 had been ordered at 0927Z 
(1627G), the time the message was intercepted by 
Phu Bai, to “make ready for militaiy operations 
the night of 4 August.” Although the report did 
not specify the nature of the militaiy operations, 
the Marines appear to have concluded that it was 
an attack against the Desoto. The NSG detach- 
ment informed Herrick. Within an hour, at 
1240Z, he informed CINCPAC and other com- 
mands that he had received “INFO INDICATING 
ATTACK BY PGN P-4 IMMINENT. MY POSI- 
TION 19-ION 107-00E. PROCEEDING SOUTH- 
EAST.” 84 At this point, the two ships were about 
eighty to eighty-five nautical miles from the near- 
est DRV coastline and began to head southeast at 
twenty knots. 

-(S) A short time later, just after 1300Z 
(2000G), the Desoto vessels acquired their first 
radar contacts. The Maddox reported that it had 
detected “two skunks” (surface contacts) and 
three “bogies” (air contacts) on its radars. The 
surface contacts were about forty to forty-five 
miles to the northeast of the two destroyers, put- 
ting them about 100-110 miles away from the 
Vietnamese coast at sea, but very close to Hainan 
Island. 85 (The appearance of aircraft returns 
(bogies) on the destroyer’s radar has generally 
gone unremarked upon by various commenta- 
tors. Herrick speculated that these were terrain 
returns. Whatever the case, these false “bogies” 



suggest Maddox’s air surveillance radar was still 
malfunctioning.) The Ticonderoga ordered the 
four jets on CAP to cover the two ships. It scram- 
bled four more AlH Skyraiders. Within an hour, 
the aircraft were overhead. 

fS^At about 2045G (1345Z), Herrick reported 
he had lost the original surface contacts: they had 
never closed to less than twenty-seven miles from 
his own ships. At 2108G (1408Z), Maddox detect- 
ed another return - first identified as one boat, 
later thought to be several boats in a tight forma- 
tion - this time only fifteen miles away to the 
southwest, moving towards the destroyers at thir- 
ty knots. Nine minutes later, naval A-4 Skyhawks 
flying air cover were vectored towards the sup- 
posed boats. Although the pilots could see the 
wakes of the destroyers clearly, they could see no 
boats at the point the radar indicated. At 2131G 
(1431Z), this radar return disappeared. 86 

(U) Then at 2134G (1434Z) came the most 
important radar contact of the entire incident. 
What appeared to be a single boat suddenly 
appeared on the Maddox’s radar screen east of 
the two destroyers at 9,800 yards and closing at 
nearly 40 knots. The Turner Joy detected anoth- 
er object approaching, but on a different heading, 
distance, and speed. According to Marolda and 
Fitzgerald, the navy claimed that this was the 
same return as the Maddoxes. 87 At 2137G (1437Z) 
at a distance of 6,200 yards from the Desoto ves- 
sels, the return tracked by the Maddox appeared 
to make a sharp turn to the south. This maneuver 
was interpreted by the Maddox combat informa- 
tion center as a turn after a torpedo run. If this 
was a torpedo launch, then it was an extraordi- 
narily desperate one. Hanoi’s tactical specifica- 
tions for its P-4s called for torpedo launches at 
ranges under 1,000 yards. At over 6,000 yards, it 
was unlikely a torpedo launched at a moving tar- 
get could hit anything. 88 The sonar operator 
aboard the Maddox detected a noise spike on his 
equipment, but did not report it as a torpedo. This 
conclusion was reached on the CIC. However, the 
Turner Joy never detected any torpedoes on its 
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sonar. Nor did it detect any torpedoes at all on its 
sonar that night. 89 

(U) At 2140G (1440Z), Herrick informed 
CENCPACFLT that he had commenced firing on 
the attacking PT boat. The Turner Joy had begun 
firing at its return shortly before this. Both 
destroyers had a difficult time holding a radar 
lock on their targets. Within five minutes, the 
return on Maddox ’ s radar, which was moving 
away from the destroyers, disappeared from its 
screen at a distance of about 9,000 yards. The one 
that the Turner Joy was tracking kept approach- 
ing, and at a distance of about 4,000 yards, it dis- 
appeared as well. 9 ® 

(U) For the next fifteen minutes all surface 
contacts were gone from the radars of the two 
destroyers. Then, at 2201G (1501 Z), more con- 
tacts were detected coming from the west. Now 
the thickest part of the naval action commenced. 
The two destroyers gyrated wildly in the dark 
waters of the Gulf of Tonkin, the Turner Joy fir- 
ing over 300 rounds madly at swarms of attack- 
ing North Vietnamese boats - maybe as many as 
thirteen - and dodging over two dozen torpedoes. 



Another twenty-four star shells had been fired to 
illuminate the area and four or five depth charges 
had been dropped to ward off the pursuing boats 
and the torpedoes. The Maddox vectored over- 
head aircraft to the surface contacts, but time and 
again the aircraft reached the designated point, 
dropped flares, and reported they could not find 
any boats. By the time the attack was considered 
over at 2335G (1635Z), Herrick reported two 
enemy patrol boats sunk and another damaged. 
(The count of the damaged boats varied; Herrick 
believed that the DRV boats sank one of their own 
accidentally. It is not understood how he arrived 
at this conclusion, except as a misinterpretation 
of the radar data which itself was of dubious qual- 
ity.) 

(U) It should be mentioned again that the 
radar returns from both ships were not continu- 
ous trackings. Rather, they were mostly flashing 
returns, that is, they appeared on the scope, held 
for a few sweeps of the radar, then disappeared. 
Other targets would suddenly appear a few miles 
from the destroyers, hold for a while and then dis- 
appear. They came from all directions. As each 
return was logged, it was assigned a target desig- 
nator, a single letter. One offi- 
cer from the Turner Joy 
described the confusion of pro- 
liferating targets this way: “We 
were getting blotches on the 
the radar screen - nothing real 
firm, so we were whacking 
away at general areas with 
proximity fuzes, hoping to get 
something.” 91 A target would 
apparently be hit and then dis- 
appear as if it had completely 
and instantaneously incinerat- 
ed in an explosion — contrary 
to what had happened two 
days earlier when the North 
Vietnamese PT boats would 
take several hits but remain 
afloat afterwards. The 
Maddox ! s main gun director 




(Courtesy of the Naval Historical Center) 
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maintained that the ship was never able to 
acquire any of the targets during the battle; he fig- 
ured he was shooting at the high swells brought 
on by the storms. 92 Ironically, during all of this 
latter action, the Maddox never fired a round; its 
radar never acquired smother target after the ini- 
tial one detected two hours earlier. 93 

(U) The sonar returns of the supposed torpe- 
do attacks were later determined to be a result of 
the high-speed maneuvering by both U.S. ships. 
As we saw above, the first “evidence” of a torpedo 
launch by the enemy boats came from radar. 
When one of the radar tracks turned away to the 
south from a westerly heading, this was interpret- 
ed by the Americans as a torpedo launch. The 
sonar rooms in both destroyers were then alerted 
to a possible torpedo attack. Four crewmen 
aboard the Turner Joy thought they saw a “white 
streak” in the water as the ship turned. 94 Both 
vessels had then gone into wild evasive maneu- 
vers to avoid the torpedoes that were thought to 
have been launched against them. It was this 
high-speed gyrating by the American warships 
through the waters that created all of the addi- 
tional sonar reports of more torpedoes. Every 
time one of the destroyers changed course, the 
sonar reported the distinctive high-speed sounds 
of torpedoes. Eventually, Herrick and the other 
officers realized what was happening: the rud- 
ders of the two ships had caused the high-speed 
returns when they reflected the turbulence of the 
ships’ own propellers. 95 

-4S)- Within an hour of the end of the attack, 
Herrick relayed his doubts about the attack in an 
after-action report. After reviewing the number of 
contacts and possible sinkings, he stated, 
“ENTIRE ACTION LEAVES MANY DOUBTS 
EXCEPT FOR APPARENT ATTEMPTED 
AMBUSH AT BEGINNING.” 96 Herrick then sug- 
gested in the morning that there be a thorough air 
reconnaissance of the area for wreckage. In a fol- 
low-up message, Herrick added that the Maddox 



had “NEVER POSITIVELY IDENTIFIED A 
BOAT AS SUCH.” 97 

(U) Herrick’s doubts did not sit well with 
Washington. Since the first Critic warning of the 
attack, which had arrived at 0740 EST, 
Washington had been following the action in the 
Gulf of Tonkin. At 0925 EST, Secretary 
McNamara had called the president with the 
news of the imminent attack. At 1000 EST the 
flash message from the destroyers that they were 
under attack reached the Pentagon. Within three 
hours after the attack ended, 1400 EST, President 
Johnson had already approved a retaliatory strike 
against North Vietnamese naval bases to be car- 
ried out at 1900 EST, 4 August (0700G, 5 
August). 

(U) Precisely why President Johnson ordered 
a retaliatory strike so quickly is not totally clear, 
especially when there was conflicting evidence as 
to whether it had actually occurred. Johnson was 
in the midst of a presidential campaign and his 
opponent, Republican senator Barry Goldwater 
from Arizona, a noted hawk, would have gained 
in the race if Johnson had hesitated or refused to 
retaliate. Johnson, even in his pose as a moderate 
relative to Goldwater, could hardly appear weak 
before a public audience demanding a counter- 
strike. 98 It also has been suggested that when 
Johnson first learned of the possible attack, that 
is, the first Critic issued by Phu Bai, he decided to 
use the warning as an excuse to get Congress to 
pass what was soon to be known as the Gulf of 
Tonkin Resolution. 99 

— (S)" Whatever the president’s own rationale 
for ordering the air strike, he required immediate 
verification of the North Vietnamese attack 
because of the doubts that started to be openly 
expressed within the administration. At around 
1400 EST, Admiral Ulysses S. Sharp, CINC- 
PACFLT, called the Pentagon with the news that 
“a review of the action makes many reported con- 
tacts and torpedoes fired ‘appear doubtful’ ” 
because of freak weather, over-eager sonar oper- 
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ators, and the absence of visual sightings. 100 
McNamara called Sharp, who added that there 
was “a little doubt on just what exactly went 
on.” 101 Messages buzzed back and forth between 
Washington and the Pacific, demanding informa- 
tion and then getting contradictory evidence of 
the attack. The Desoto mission reported that 
except for possibly the first torpedo report at 
2159G (1459Z), all others were caused by reflec- 
tions off the two destroyers’ screws. 102 At the 
same time, Herrick reported that the air cover 
from the two carriers was unable to locate the tar- 
gets because of poor weather. Yet the carrier 
Ticonderoga transmitted its own evaluation in 
which the pilots had “REPORT[ED] NO VISUAL 
SIGHTINGS OF ANY VESSELS OR WAKES 
OTHER THAN TURNER JOY AND M[ADDOX]. 
WAKES FROM TURNER JOY AND M[ADDOX] 
VISIBLE FROM 2-3000 YARDS.” 103 Crews from 
the two destroyers reported seeing nothing for 
certain. One sailor thought he had seen flashes of 
gunfire, but wasn’t sure. 

— (T0//GI) Then, like a classic deus ex machina, 
along came a second SIGINT report that seemed 
to clinch the case for an attack. This report was a 
translation issued by NSA on the 4th of August at 
1933Z (1433 EST in Washington) and was leaped 
upon by administration officials, especially the 
secretary of defense, Robert McNamara, as direct 
evidence of the attack. What this translation 
appeared to be was a sort of North Vietnamese 
after-action report. An unidentified North 
Vietnamese naval authority had been intercepted 
reporting that the DRV had “SHOT DOWN TWO 
PLANES IN THE BATTLE AREA,” and that “WE 
HAD SACRIFICED TWO SHIPS AND ALL THE 
REST ARE OKAY.” It also added that “THE 
ENEMY SHIP COULD ALSO HAVE BEEN DAM- 
AGED.” 104 

(U) At 1640 EST, Admiral Sharp again called 
McNamara with more information on the attack. 
Just before 1700 EST, McNamara and the JCS 
met to evaluate the evidence on the attack. They 
concluded that it had occurred and that five fac- 



tors were critical: “(1) The Turner Joy was illu- 
minated [by a searchlight] when fired on by auto- 
matic weapons; (2) One of the destroyers 
observed cockpit [bridge] lights [of one of the 
DRV patrol boats] ; (3) A PGM 142 had shot at two 
U.S. aircraft (from COMINT); (4) A North 
Vietnamese announcement that two of its boats 
were ‘sacrificed’ (from COMENT); (5) Admiral 
Sharp’s determination that there was indeed an 
attack.” 105 

(U) Of the five pieces of “evidence,” two were 
from the same NSA product issued that afternoon 
(EST). If the two pieces of visual evidence - the 
searchlight and cockpit light reports - were con- 
tentious, the SIGINT was, in the minds of the sec- 
retary of defense, the JCS, and the president, the 
“smoking gun” evidence needed to justify the air 
strikes on North Vietnam. 106 So, at 0700G 




(V) Burning North Vietnamese patrol boat 
after 5 August strike 
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(OOOOZ) on 5 August, CINCPAC received the 
order to execute the retaliatory raid, codenamed 
Pierce Arrow. At 1030G (0330Z), naval strike air- 
craft from Ticonderoga were launched. By early 
afternoon they hit several targets in the DRV, 
including almost all of its naval installations. 

(U) The Silent Dogs: What the 
SIGINT Really Did (and Did Not) 
Report 

■fS // S I) Events surrounding the apparent sec- 
ond attack had been driven almost exclusively by 
SIGINT. Herrick’s personal doubts, the false 
sonar readings, the confused radar returns, and 
the pilots’ reports, all subverted the validity of the 
attack reports. But not the SIGINT. For the 
Johnson administration, both reports - the initial 
Critic reporting the North Vietnamese prepara- 
tions for operations, and the after-action report - 
acted as factual bookends, propping up the other 
pieces of contentious evidence. The details of the 
attack, as contradictory as they were, could be 
massaged or explained to fit the scenario set by 
the SIGINT. For example, since there were no 
reported shootdowns of American aircraft that 
night, then the North Vietnamese report of 
downed U.S. planes must have resulted when 
they had confused illuminating flares for falling 
aircraft. 107 

(S// S I) However, there were many problems 
specific to the SIGINT information which 
emerged almost as soon as it was being reported. 
In this section we will reconsider what happened 
that night using all of the relevant SIGINT. We 
will begin with the initial order to the Vietnamese 
boats ordering them to make ready for military 
operations. 

(S//3I) Exhibit A: The First Attack Message 

(fl//0 ft The first product, the “attack” mes- 
sage, issued at 1115Z (1815G), reported only the 
fact that there was a possible DRV naval opera- 
tion planned against the Desoto patrol. At 1140Z 



(1840G), this was followed up by a second report 
from Phu Bai which contained a number of 
details, such as that T-146 and T-333 were to 
cany out military operations with T-142. Unlike 
the messages of 2 August, there was no reference 
to an “enemy,” no tracking to equate to the 
Desoto patrol, or any indication of the nature of 
the operations to be carried out by the boats. In 
fact, the original intercepted message was only 
the first part of a larger message, the rest of which 
was not intercepted. So, what might have been in 
the latter part is unknown, except that it might 
have amplified the meaning of the type of opera- 
tion the boats were involved in. 

(G//0 f)~What made this intercept a Critic was 
the interpretation put to it by the Marine SIGINT 
site at Phu Bai, which stated that this was an 
“OPERATION PLANNED AGAINST THE DESO- 
TO PATROL.” 108 The follow-up report from Phu 
Bai amplified the original Critic and maintained, 
as well, that the attack was against the Desoto 
mission. 109 When one considers the events of 2 
August, this interpretation was not totally 
unfounded; one could see a reference to a military 
operation being directed against the American 
warships. However, the text of the intercept never 
mentioned a target or any objective of the military 
operation, or even the nature of the operation. As 
we shall see soon, not everyone who saw this 
intercept jumped to the same conclusion that an 
attack against the American ships was being 
planned. 

(0//3I) Another problem is that the decrypted 
Vietnamese phrase for military operations, hanh 
quan, has an alternate meaning of “forced or long 
march or movement,” which, in a nautical con- 
text, could refer to a voyage by both T-146 and T- 
333. As it turns out, this is the activity that the 
intercept was actually alluding to. 

(S//SI) F or at 1440Z, almost at the precise 
moment that Herrick ordered his two destroyers 
to open fire on the approaching radar returns, the 
Phu Bai intercept site issued a spot report which 
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SECRET KIMDO 
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TO USN 467N 
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USM 27 

MSAPAC REP VIETNAM (C) 

DIRNSA 

SECRET KIMBO 
DESOTO 

I POSS DRV NAVAL OPERATION P LARS ED AGAINST THE DESOTO PATROL 
TQH1IE 04 AUG. AMPLIFYING DATA POLS 



SECRET KIMDO 

-rt//5TT Phu Baf Critic alerting Pesoto patrol to 
possible attack 

I stated that both DRV torpedo craft, T-336 and T- 
i 333, the latter of which earlier had been reported 
ready to attack the Desoto patrol, were, in fact, 
being readied to be towed to either Haiphong or 
Port Wallut. This second report carried two 
salient points: First, at 1946G (1246Z), Swatow 
T-142 reported to Haiphong that the tug Bach 
Dang was unable to return to port. T-142 also 
included the statement that if the ship [ Bach 
Dang ] “MET THE DESOTO MISSION, IT WAS 
TO [A]VOID THEM.” 110 Besides being a warning 
about the Desoto ships, the message also implied 
that the North Vietnamese thought that the 
destroyers were close enough to shore to be a 
threat to DRV vessels, whereas, at this time, the 
American ships were far out at sea. In all proba- 
bility, the North Vietnamese had lost track of the 
American destroyers (an issue which we will dis- 
cuss further on in this narrative). 

(b) (i| 

) -SO use .103 
)“P.L. 86-36 



S ECRET KIMDO 

"To 145 & Cadre IThoal. [1 U] . so that when you have orders the 
146 can tow [4 gr M] the 336 hack. If the taqk truck hasn't yat 
come to supply you, then the 146 can transfer fuel to the 333. 
With regard to orders, the 333 will carry out -military operations 
independently. with 146* (Continued) 

I continuation unavailable^ 

4 AUQ- 09272 

U8H 414T intercepted at 0409272 Date/time of files . 041558G 



SECRET ICIMBO - 



lV/51) Translation of the intercepted original of the 
'attack* order 



(6//A 0 The second point of the Phu Bai 
report was that at 2031G (1331Z) T-142 had 
informed an authority in Port Wallut that the tug 
was towing the two craft from Squadron 135. The 
analysts at Phu Bai added this comment to the 
end of their report which read, “WITH THE MTB 
336 ADDED TO ITS STRING, IT AP[PE]ARS 
THAT T333 WILL NOT PARTICIPATE IN ANY 
MILITARY OPERATIONS.” So, the boats origi- 
nally reported being ready to attack the Desoto 
patrol, were incapable of even moving on their 
own! 

- ( Sf/S i } In fact, this attempted salvage of the 
two damaged torpedo boats would occupy the 
efforts of Hanoi’s sailors for much of the night of 
4/5 August. The Vietnamese would try various 
methods of getting the two damaged P-4s to a 
port for repairs. During the 2300G hour, T-146 
was ordered by Haiphong to escort the Bach 
Dang as it returned to base. When that was com- 
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pleted, T-146 was ordered to Bay Chay, a point 
near Haiphong harbor. 111 Shortly afterwards, T- 
142 informed Haiphong that the very busy T-146 
was now to tow T-336 back, but since the latter 
boat was short of fuel, the T-333, which was short 
of oil but under tow from the Bach Dang, could 
transfer one to five tons of its fuel to its sister ves- 
sel. 112 At 1830Z on 4 August (0130G on 5 August), 
the navy monitoring site at San Miguel intercept- 
ed T-142’s report to Haiphong that T-146 had 
completed its preparations for the two torpedo 
boats by 0100G 5 August (1800Z 4 August). 113 So, 
in reality, none of the boats named in the original 
attack Critic in fact participated in anything but 
salvage efforts. 

■(S^Remember, Captain Herrick did not know 
that the original Critic was really an interpreta- 
tion, and that there was no explicit reference to an 
attack on his ships. He accepted the Critic’s con- 
tents as intercept of actual Vietnamese plans to 
attack his ships when he informed the 
Ticonderoga task group commander of his deci- 
sion to leave the area. He added his own twist to 
the report to include specifically the unsupported 
amplification mentioning the involvement of 
North Vietnamese P-4 torpedo boats when only 
one was mentioned as a potential participant in 
the unidentified operations, and then only if it 
could be refueled. 114 

- (S//9 H The possibility that, even if the inter- 
pretation was incorrect, the Marine Critic was 
justified in light of the events from two days ear- 
lier, does not stand up when we consider that 
another site, the navy intercept station at San 
Miguel, Philippines, had translated the same 
“operations order,” but reported it in a much dif- 
ferent fashion. The navy translated the same 
intercept and then reported it at a Priority prece- 
dence, two levels below a Critic (or one level 
above Routine). The navy analysts titled the 
report “REPLENISHMENT OF DRV NAVAL 
VESSEL.” The San Miguel report translated the 
critical sentence as: “T146 SUPPLY FUEL FOR 



THE 333 IN ORDER TO GIVE ORDERS TO PUT 
INTO OPERATION ((2 GR G)) WITH T146.” 115 

( S // 8 I )- The difference (and correctness/ 
incorrectness) between the translations is not 
important as much as the fact that San Miguel 
viewed the information as nothing more than the 
refueling of the damaged torpedo boats. This was 
in line with an earlier intercept of a query from 
Haiphong to T-142 asking if T-333 had been refu- 
eled yet. 116 Unfortunately, because the San Miguel 
version was a lower precedence, it was released 
much later. In fact, it came out at 1838Z (0038G), 
some two hours after the destroyers had stopped 
shooting. 

4 S//SB The quandary created by the reports 
about the salvage operations is this: If the origi- 
nal suspect vessels, the two Swatow-dass patrol 
and two damaged P-4 torpedo boats, were not 
participating in the anticipated “attack” against 
the Desoto patrol, then who exactly was going to 
attack? No other messages had been intercepted 
which suggested that any other DRV boats were 
handed the mission of attacking the American 
destroyers. In fact, there was no intercept at all 
which hinted at an attack; nothing at all like what 
had been intercepted on 2 August. So, if the orig- 
inal culprits were involved in salvage operations, 
then just what was going on in the Gulf of 
Tonkin? 

-(S//SI) For NSA and the rest of the SIGINT 
participants, the second Phu Bai report should 
have acted as a brake to any further reporting 
about an attack. It directly contradicted the inter- 
pretation - remember, it was an interpretation 
only - contained in the initial Critic which 
claimed an attack was being prepared. At this 
point, all the SIGINT community could accurate- 
ly state was that there was no signals intelligence 
reflecting a planned or ongoing attack against the 
Desoto mission. 

-(T3//SI) Except this is not what happened. 
The second Phu Bai report was not used to report 
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what was going on in the Gulf of Tonkin. Instead, 
the problem posed by the second Phu Bai report 
was handled in a curious manner. Late on 4 
August, Washington (050130Z August 1964), 
NSA issued a Gulf of Tonkin situation report 
which covered the events of 4 to 5 August. At the 
end of the report, NSA added these interesting 
sentences: “ALTHOUGH INITIAL MESSAGES 
INDICATED THAT THE T142, T146, AND T333 
WOULD BE INVOLVED IN THE ATTACK . . . 
SUBSEQUENT MESSAGES [not further identi- 
fied in the report - a curious lapse by NSA which 
we will address in detail later] SUGGEST THAT 
NONE OF THESE [BOATS] WAS INVOLVED. 
REPORTS FROM THE MADDOX THAT IT WAS 
UNDER ATTACK SOME SEVENTY NAUTICAL 
MILES NORTHEAST OF THE NAVAL BASE AT 
QUANG KHE SUGGEST THAT NAVAL UNITS 
SUBORDINATE TO THE SOUTHERN FLEET 
COMMAND . . . WERE INVOLVED. . . .” 1,7 

(T3//3I) However, the effort to find “culprits” 
only compounded the errors: the only boats 
known to be stationed permanently at Quang Khe 
were Swatow - class patrol boats which did not 
carry torpedoes. 118 All P-4 torpedo boats staged 
from Port Wallut far northwest of the action. 
Accusing the Swatow craft of participating in the 
attack was no “solution”; in fact, it only added to 
the confusion. In reality, though, this statement 
by NSA was a vain attempt to cover the problem 
of the contradictory report from Phu Bai. It was 
nothing but speculation - ignorant speculation at 
that. Furthermore, this summary report still did 
not address the issue of the total lack of intercept 
of any North Vietnamese attack command and 
control communications. 

(U) Fingering the Swatows as the culprits 
only made the “attack” scenario more improbable 
for another reason. The distance from Quang Khe 
naval base (17°46 'n, lCte^E) to the reported 
first radar plot by the Maddox, forty to forty-five 
nautical miles northeast of its position, is about 
120 nautical miles. However, this distance should 
not be construed as a “straight line” dash from 



Quang Khe. Because the DRV boats were “detect- 
ed” coming from the east, they would have had to 
travel in a long arc northward and then southeast 
around the American destroyers which were 
speeding to the southeast. Also, remember that 
the Maddox and Turner Joy did not “detect” 
these boats until they approached from the east, 
so the route to the north of the American destroy- 
ers had to be at a distance sufficient to avoid dis- 
covery by radar. This lengthens to a distance of 
around 180 nautical miles. Since the “attack 
order” was issued at 1115Z and the initial radar 
plot was at 1336Z (and we are presuming that the 
postulated boats left at the exact time of the first 
intercept, or were soon under way at the time), 
then the boats would have had to have been trav- 
eling at a speed of nearly seventy miles per hour 
(about 110 kph) to have been where the Maddox 
first detected them - at a rate some 58 percent 
higher than the Swatow ’ s known top speed! 

(U) The only other base from which the 
“attack” could have been staged was Port Wallut, 
which was the base for the P-4 Squadron 135. The 
distance from Port Wallut (21°13 / N, 107°34 / E) to 
the initial point of detection by the Desoto radars 
is about 140 nautical miles. However, the same 
problem exists here as for Quang Khe, though not 
quite as extreme, for the P-4s. The scenario pre- 
sumes that they would have been moving at a lit- 
tle less than seventy miles per hour, or a good 40 
percent higher than the boat’s listed maximum 
speed. 

- ( S //B f)~ Another possibility to consider when 
looking at the “attack message” is that there was 
some other activity to which the “military opera- 
tions” (if that is the interpretation one could 
have) might have referred. In fact, there was 
something else going on that night of 4/5 August 
which is seldom mentioned in the public record: 
a maritime OPLAN-34A mission was, in fact, 
moving northward along the DRV coastline at the 
time when the American destroyers were shoot- 
ing away at those radar returns. The Marolda and 
Fitzgerald history of the U.S. Navy in Vietnam 
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fails to mention the ongoing 34A mission. Official 
Washington as well never mentioned this 34A 
mission. In classified hearings in February 1968, 
Secretary of Defense McNamara never men- 
tioned this mission, claiming that the last one 
prior to the 4 August attack occurred on the night 
of 3-4 August. Obviously, if the 34A mission of 
the night of 4-5 August were known at the time, it 
would have undercut Washington’s claim that 
nothing else was happening that night which 
might have provoked Hanoi. 

(U) This 34A mission had been scheduled 
back at the end of July by COMUSMACV, which 
then had informed Washington of the missions 
planned for all of August. This particular foray’s 
main objective was the shelling of the island of 
Hon Matt. It is not certain when this mission left 
Danang, though it was normal for the boats to 
depart in the late afternoon to take advantage of 
darkness by the time they reached the DRV coast- 
line. So a departure time between 1500G and 
1600G (0900Z) would not be too far off. 

■fS//SI) At 2316G (1616Z) the Marine mission 
at Phu Bai intercepted a message from the DRV 
naval HQ in Haiphong to T-142 that six enemy 
raiding vessels had been located somewhere 
south of Thanh Hoa (20°00 / N, 105°30 'e). (The 
actual position is confusing due to a garble in the 
text transmitted from Phu Bai. Neither the time 
of the enemy boats’ position nor their course is 
clear.) 119 This intercept occurred only a few min- 
utes before the JCS approved an urgent recall 
order from CENCPACFLT for the 34A mission to 
be discontinued and return to Danang immedi- 
ately. 120 It is possible that the Kit Kat support ele- 
ment may have passed this intelligence to the 
MACV/SOG, which in turn began the recall. 

(8//SI )-In light of what finally transpired with 
T-142 and the two P-4 torpedo boats, it seems 
that they were not part of an defensive plan 
against the raiders. That this Swatow received 
the message about the raiders does not seem odd 
in light of the fact that T-142 seems to have served 



as some sort of radio relay for other boats or as a 
communications guard vessel for all DRV naval 
operations: a majority of intercepted messages 
during the period seem to have been sent to or 
through T-142. From other intercepts, we know 
that at least another Swatow, T-379, was near 
Hon Matt; two others, T-130 and T-132, were 
near Hon Me Island; and T-165 had deployed, as 
well. If the DRV was planning to attack the 34A 
raiders on 4 August, these craft would have been 
the logical ones to use because of their substantial 
deck gun armament. However, no other commu- 
nications activity related to any other Swatow 
patrol craft was intercepted that night. So it 
remains uncertain what, if anything, Hanoi was 
planning to do to fend off the 34A mission of 4 
August. 

(S//SI) Exhibit B: The Lack of Vietnamese 
Command, Control, Communications, and 
Intelligence 

(S//SI) To our initial question as to who was 
involved in the apparent attack of the two 
American destroyers, we must add a corollary 
question: How did the North Vietnamese cany 
out the “attack”; that is, how were the boats con- 
trolled and vectored to the American ships? If we 
recall the three elements of the command, con- 
trol, communications and intelligence (C3I) 
observed during the previous two days’ activities 
- communications from Haiphong and Port 
Wallut, relayed through the Swatow-dass boats; 
the relay of tracking information on the American 
ships; and the use of the Skin Head surface search 
radar - then we have another serious problem 
with the engagement of the night of 4 August 
because none of these elements was present dur- 
ing the so-called attack. 

TS//SI) During the entire day of 4 August, 
most of the communications intercepted from 
either DRV naval command entities in Port 
Wallut or Haiphong either were directed to the 
craft involved in the salvage and recovery of the 
two Squadron 135 torpedo boats, or else were 
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relays of tracking reports of the Desoto patrol, 
and those latter messages were exchanged with 
T-142, which was involved in the ongoing recov- 
ery operations. The only other messages which 
were intercepted contained orders for other 
Swatow-dass patrol boats to move to positions 
along the coast: T-130 and T-132 were ordered to 
Hon Me Island, while T-165 was ordered to leave 
Haiphong at 1448G (0748Z) and move to the 
entrance of an unspecified bay. 121 

-f S/ /SI) During the 2 August attack, there 
were elements of high-level control from the 
naval commands at Port Wallut and Haiphong, 
both of whom sent orders and tracking reports to 
the attacking boats. The Swatows, principally T- 
142, acted as a communications relay between the 
torpedo boats and the onshore commands. The 
messages were transmitted using high frequency 
manual morse communications which were 
intercepted throughout the day, even during the 
fighting. Finally, there were sporadic boat-to-boat 
VHF, tactical voice communications which the 
intercept positions aboard the Maddox’s hut 
could intercept, at least until the destroyer acti- 
vated its fire control radars, which interfered with 
the navy’s monitoring. 

(S//SI) However, not one of these elements 
was detected during the night of 4 August Trying 
to find more evidence of the purported attack, 
NSA had queried the NSG detachment aboard the 
Maddox on 6 August to supply urgently all inter- 
cept that “PROVIDES PROOF OF DRV ATTACK 
ON FOUR AUGUST UPON U.S. NAVAL VES- 
SELS.” 122 Within five hours came the dishearten- 
ing reply from the DSU. There was no manual 
morse intercept to prove the DRV attack of 4 
August. Furthermore, voice intercept was nil, 
except for signal checks between two unidentified 
stations. 123 

-(0//0ITThe tracking messages locating the 
Desoto patrol ships had been intercepted by the 
Americans early in the day of 4 August. However, 
the last credible position of the American ships 



was passed at 1610G (0910Z) from Haiphong to 
T-142. The position, 19°36 / N, 106°19 / E, was fairly 
close to the Desoto patrol’s position at the time. 
This was just about two hours before Herrick 
ordered his ships to head east in reaction to the 
Phu Bai Critic. 124 However, it should be pointed 
out that this position report was sent to the T-142, 
which was involved in the salvage of the two tor- 
pedo boats. There is no evidence that the T-142 
relayed it to any other boat or command. 

■tS//0I> One more position report on the 
Desoto patrol was sent from Port Wallut to a 
probable vessel at 2246G (1546Z), which was 
about an hour after the supposed engagement 
had begun. This position report might seem as 
related to the action, except for two problems. 
First of all, the report located the American ships 
thirty-five nautical miles east of Hon Matt Island, 
which places the destroyers some eighty nautical 
miles northwest of where they actually were at the 
time! In addition, the report does not carry the 
time associated with the Americans’ position. 
(The reported location suggests, however, at least 
from the track the Desoto patrol took that night, 
that this position report was about four to five 
hours old.) So, this information could hardly be 
used by any North Vietnamese boats intending to 
attack the Americans. Secondly, the message 
includes an order (or advisory) to the recipient to 
maintain a continuous communications watch 
with an unidentified entity, as well as to “go close 
to shore.” 125 This latter command seems to be 
hardly intended for boats looking to attack the 
American ships; rather it appears suited for the 
boats involved in the salvage operations or the 
other patrol boats spread out along the DRV 
coast. 

(S// 8 I) The issue of DRV tracking of the 
Desoto patrol is important. For in September 
1964 NSA would release a report on Vietnamese 
coastal radar operations during the period. In this 
report, NSA would contend that active tracking 
by the coastal observation posts equipped with 
coastal surveillance radars would indicate hostile 
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intentions by Hanoi. The report pointed out that 
there was no tracking of the Craig earlier in 
March. 126 This was not quite true: the DRV was 
aware of the location of the destroyer, but its time 
off the Vietnamese coast was quite short so the 
tracking was spotty. 

(S//SI) The same report also pointed out that 
the Maddox was under “constant” radar surveil- 
lance before it came under attack on 2 August. 
However, the report then ducks the issue of the 
observed sporadic tracking by the North 
Vietnamese on 4 August with the claim that “The 
evidence is still inconclusive in light of the virtual 
absence of trackings on 3-4 August before the sec- 
ond attack.” 127 The evidence would never be 
found. The final report from the DSU aboard the 
Maddox showed only occasional coastal tracking 
from shore stations and North Vietnamese boats 

on 4 August. And it had ended by mid-after- 

_ 128 

noon. 

-(S)- Finally, the Americans detected no Skin 
Head emissions during the “attack” on 4 August. 
Keep in mind that during 3 August the DRV boats 
that shadowed the Desoto patrol used their Skin 
Head surface search radars, and that these emis- 
sions were detected by the ELINT position in the 
intercept hut aboard the Maddox. These signals 
were also intercepted during the morning and 
early afternoon of 4 August. 129 

— ( S//SI) While it is true that no North 
Vietnamese radar emissions were detected dur- 
ing the 2 August attack on the Maddox, it must be 
remembered that this attack occurred in the day- 
time under nearly ideal conditions. 130 Yet, the 
DRV boats had initial difficulty visually locating 
and then following the Maddox. What we are 
confronted with in the second “attack” is the 
proposition that the North Vietnamese boats 
themselves, which the Turner Joy and Maddox 
detected using only their radars, could find the 
Americans so far out at sea (over 100 nautical 
miles), in heavy swells (three to six feet), at night, 
with a low cloud cover, without using their 



radars. Even if the North Vietnamese had the 
equipment to receive the American radar pulses, 
this information would have given them only a 
crude bearing on which to track. They could not 
determine distance, speed, or anything else with 
which to plot any sort of torpedo attack. 131 
Besides that, how could they even begin to track 
the American ships when the latest valid position 
was almost five hours old! 

(U) In the Sherlock Holmes story “Silver 
Blaze,” the great Victorian detective and his assis- 
tant, Dr. Watson, are confronted with the para- 
dox of a crime which cannot be proven to have 
happened. In the story there is this exchange: 

Is there any point to which you wish to draw my 
attention? 

To the curious incident of the dog in the night- 
time. 

The dog did nothing in the night-time. 

That was the curious incident, remarked 
Sherlock Holmes . 132 

-( S//SI) And so it is with the 4 August inci- 
dent: there were no DRV naval communications 
or radar emissions which were normally associat- 
ed with a naval engagement. Just two days prior, 
the Americans had an opportunity to observe 
Vietnamese naval communications during the 
attack on the Maddox. Among other things, they 
had seen that the Vietnamese had difficulties in 
setting up and maintaining control of an attack, 
as the incident with the conflicting orders illus- 
trated. And so there should have been a generous 
amount of intercept of any communications 
which would have supported the claims of the two 
American destroyers. 

(S//SI ) - Yet, nothing as much as a single bark 
was intercepted. As Holmes would come to con- 
clude that no crime was committed, so we must 
conclude that, since U.S. SIGINT never intercept- 
ed anything associated with an attack, none ever 
occurred. And the contention that all possible 
communications and emissions reflecting an 
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attack might have gone unheard can be dis- 
missed. As Gerrel Moore, the officer-in-charge of 
the DSU on board the Maddox, observed: “I can’t 
believe that somebody wouldn’t have picked up 
something.” 133 Finally, a review of the DSU inter- 
cept log for 4 August showed no variation in 
Vietnamese communications procedures which 
could suggest that any change or changes, such as 
new operating frequencies, callsigns, or proce- 
dures, were implemented just for the “attack” that 
could elude American intercept. 134 

(S//SI) Exhibit C: The “After-Action” Report 

(0//0I) With there being no SIGINT evidence 
of an attack, and the rest of the evidence from 
visual, radar, and sonar sources so unsupportive, 
we are left with attempting to explain the inter- 
cept of late 4 August, which was interpreted as an 
after-action report. Remember, it was this inter- 
cept which was so critical to McNamara’s con- 
tention that an attack had occurred - two of the 
five pieces of his list of “convincing” evidence. Yet, 
when we look closely at the intercept, there are 
four major problems with the assertion that it was 
a report on the supposed engagement from just a 
few hours earlier on 4 August. The translation, 
“T10-64,” issued by NSA at 1933Z on 4 August 
(0233G, 5 August) is shown on this page. 

(S//SI) The first difficulty with the intercept is 
that it does not resemble an after-action report of 
the type which had been intercepted early on 3 
August by the Marine element at Phu BaL That 
intercept, sent by T-142 to T-146 and the Port 
Wallut HQ of Squadron 135, contained a chronol- 
ogy of events beginning at 0925G on 2 August 
when T-146 met the three boats from Squadron 
135 and guided them to Hon Me Island. The 
report noted that the attack against the 
Americans began at 1525G, and that by 1625G, all 
the boats had received the orders to break off the 
attack. 135 

(S// S I) In the 4 August translation, there is no 
chronology associated with the supposed down- 
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SECRET KIMBO 

(9//5tfThe supposed Vietnamese communist 
naval after-action report 

ing of the aircraft. There is no mention of any par- 
ticipating boats or units, except to mention that 
two were “SACRIFICED . . . AND ALL THE REST 
ARE OKAY.” The only sense of when anything 
happened comes with the beginning phrase, 
“AFTER THE 135 HAD ALREADY STARTED TO 
REPORT TO YOU.” In fact, the entire report 
seems incoherent, not the type one expected to 
see sent by an officer on the scene, as had been 
intercepted on 3 August. It rambles, mixing 
morale boosting statements with seemingly repe- 
titious references to planes being shot down and 
then seeing them “sink.” 

(S// S I ) Secondly, there is a problem with the 
translation of a critical passage: “WE SACRI- 
FICED TWO SHIPS AND ALL THE REST ARE 
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OKAY.” Unfortunately, the original, decrypted 
Vietnamese language version of the message can- 
not be located in the NSA Archives. Also, a possi- 
ble original translation of the entire message (or 
part of it), numbered “T162-64” and issued by the 
navy site at San Miguel, cannot be found in the 
NSA Archives file of that site’s 1964 translations. 
Without either document, we are left with the 
conjecture of what Vietnamese words were seen 
by the navy analysts and linguists at San Miguel 
and their counterparts at NSA. 

•f9//0I) However, from the existing records, 
what we do know is that the translation finally 
issued by NSA was not what was initially report- 
ed by San Miguel. At 1550Z (2250G) on 4 August, 
when the American destroyers were shooting 
away at those radar returns, San Miguel inter- 
cepted a message which it identified as being sent 
from T-142 to an unidentified entity at My Due 
(19 52^, 105 5/E). In total, the report, num- 
bered “R38,” read: 

WE SHOT AT TWO ENEMY AIRPLANES AND 
AT LEAST ONE WAS DAMAGED. WE SACRI- 
FICED TWO COMRADES BUT ALL ARE 
BRAVE AND RECOGNIZE OUR OBLIGA- 
TION. 136 

(U) How the translation changed from “com- 
rades” in the San Miguel version to “boats” in the 
NSA version is unknown. Edwin Moise, in his 
study of the Tonkin Gulf, suggests that a 
Vietnamese sentence to the effect of losing two 
comrades could hardly be construed to mean two 
ships: “HAI DONG CHI HY SINH” or “HAI 
DONG CHI BI HY SINH” are possible 
Vietnamese phrases which could be translated to 
“sacrificing two comrades.” 137 The Vietnamese 
word for boat, “TAU,” had been seen in earlier 
intercepted messages. This would be consistent, 
since Hanoi’s messages usually shortened the 
word to just the letter “T” from where the same 
letter designators for Hanoi’s boats comes from, 
such as “T-142,” “T-146,” etc. 



-( S//fH ) A possible argument that there was a 
garble in the encryption of the message which 
could have led to confusion does not hold.p 



(U) There is an additional point of interest: 
President Johnson in his memoirs noted that 
“The North Vietnamese skipper reported that his 
unit had ‘sacrificed two comrades’. ” Our experts 
said that this meant either two enemy boats or 
two men in the attack group.” 139 (My italics in all 
cases.) This is an interesting admission, for it sug- 
gests, and rather strongly, that even the day that 
the NSA translation was issued, the intercept was 
considered, at best, ambiguous in its meaning. 
Why NSA opted for “boats” instead of “comrades” 
in its final translation is not clear, especially if the 
difference was enough to tell the president. 

(S//SI) The third problem is with the time of 
the intercept and the file time listed on the NSA 
translation. The file time, 2242G (1542Z), is bare- 
ly one hour after the Turner Joy and Maddox 
opened fire on the first radar returns. As we saw 
with the messages from 2 August, this entry is the 
time that the Vietnamese communications center 
(or a radio operator) assigned to the message 
when it arrived ready for transmission, which, as 
it turns out, in this case took another eight min- 
utes to complete. If we allow any time for the 
<b) r ) 
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message’s drafting, coordination, and encryption 
(remember, this is a manual system with three 
charts), then the actual time of the composition of 
the message must be pushed back close to the 
beginning of the so-called engagement. Even if 
we are generous with our appreciation of the skill 
of the Vietnamese communications personnel in 
encrypting the message, we still have to concede 
some time to get the message from composition 
to transmission. The more time we allow for this 
process, then the closer its origin comes up to the 
time that the destroyers first opened fire. In that 
case, then, the intercept cannot be considered an 
after-action report of the events currently occur- 
ring at sea in the Gulf of Tonkin. 

~f fl//GI) The question of the time of origin for 
the information in the Vietnamese message gets 
even more suspect when we consider the identi- 
ties of the Vietnamese who may have sent and 
received it. The NSA translation carries the two 
callwords “TRA” and “LAP” as unidentified. 
Actually, this is not true. San Miguel, in its 
reports, identified the transmitting station, 
known by the covemame “TRA” as the T-142 
patrol boat. The receiving station, “LAP,” was 
identified as a shore station at My Due, possibly 
the coastal observation post which earlier had 
tracked the American ships. 140 

(S//SI) In reality, these equations probably 
were incorrect. The probable identities for the 
covemames had been known for some time; it is 
just that San Miguel confused them. “TRA” had 
been associated with a DRV naval HQs in 
Haiphong as recently as 2 August. “LAP” had 
been identified with T-142 on 30 July. 141 
However, the exact identities are not important 
What is critical is that Haiphong could not have 
originated the information in the intercept; it had 
to come from some other source. Another station 
had to compose a report, enaypt, and transmit 
the information to Haiphong before it could, in 
turn, send its message. This means that the very 
first version of this “after-action” report probably 



was composed at or before the time the two 
destroyers opened fire! 

-( 6//SI) The message file time, 2242G (1542Z) 
and the intercept time, 1550Z (2250G), should 
have been highlighted in the translation. These 
times would have indicated that the intercept 
could not have been construed as an after-action 
report. Neither critical time element was noted in 
the translation. Instead, it seems that the time 
NSA released the translation, 1933Z (or 1955Z if it 
had been relayed), was the critical element. That 
the translation was issued some two and one-half 
hours after the incident was over probably was 
the reason it was interpreted by its Washington 
recipients as a North Vietnamese after-action 
report. 

-(8//SI) The translation as issued is hardly 
helpful in providing a useful background to 
explain its significance. The title, “DRV NAVAL 
ENTITY REPORTS LOSSES AND CLAIMS TWO 
ENEMY AIRCRAFT SHOT DOWN,” does not 
indicate any context for the translation. That 
being so, it would not be difficult to infer that the 
translation referred to the recently ended combat 
action. So, it just hung there waiting for someone 
to claim it, and the Johnson administration 
jumped on it. Remember, this translation arrived 
in Washington midway in the afternoon of 4 
August just at the time that the administration 
was tiying to resolve the doubts about the attack 
that Captain Herrick had reported. And, as we 
have seen, it was to be the answer to all of the lin- 
gering doubts as to the validity of the attack. NSA 
itself would use the translation to support the 
contention that there had been a second attack as 
well, quoting excerpts from it in several Gulf of 
Tonkin Summary reports issued from 4 to 6 
August. The problem with the file and intercept 
times is a critical one, and it reflects a failure by 
the analysts who issued the translation to draw 
attention to them. 

TS/'/SIj'Yet, it is the fourth problem with the 
translation which is the most troublesome: that 
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is, specifically, how it was put together. It was 
mentioned above that the original intercept of the 
translation was missing from NSA files on the 
Gulf of Tonkin. We also mentioned that the pos- 
sible English translation of the entire or part of 
the intercept, “T162-64,” issued by San Miguel, 
was missing. This situation is odd since crucial 
earlier and original intercepts, such as the “attack 
message” and several tracking reports, were 
available and placed in the allegedly “complete” 
NSA chronology of the attacks, the latter docu- 
ment of which we will discuss shortly. But neither 
the original intercept nor the translations from 
San Miguel are in the chronology. It would seem 
that they should be there to buttress the validity 
of the all-important “after-action” report. 142 
However, they are not; therein lies the problem. 

(S//SI) For only four minutes (1554Z) after 
San Miguel reported the transmission about “sac- 
rificing two comrades," it published the following 
intercept from T-142 to My Due: 

((3 GR G}) THE NEWS [BECAU[S]E] THEY 
DID CONTINUOUSLY SEE WTrH THEIR 
OWN EYES ENEMY AIRCRAFT FALL INTO 
THE SEA. ENEMY VESSEL PERHAPS IS 
DAMAGED. REPORT THIS NEWS TO THE 
MOBILIZED UNIT. 143 

(S//6I) If we take the two intercepts from San 
Miguel in the sequence in which they were moni- 
tored and put them together, we have construct- 
ed, with the addition of some transitional words, 
the so-called “after-action” translation, “T-10,” 
issued by NSA at 1933Z on 4 August. Since the 
messages were transmitted by the Vietnamese in 
this sequence, both spoke of aircraft, and were 
transmitted shortly after one another with little or 
no interval, it probably was not difficult to con- 
flate the two as parts of the same message. 

-(S//3f) However, are these two intercepts 
really parts of the same message? The answer 
turns out to be no. This is because the English 
translation of the second intercept exists. San 



Miguel transmitted it to NSA on 8 August as part 
of the post-crisis review. It carried an important 
item — the Vietnamese-assigned message file 
number, “NR24,” which indicates that the second 
intercept was a separate message after all, and 
not part of the first intercept! 144 

(S//S t)~So, if we look at the NSA translation, 
“T10,” specifically beginning at the phrase 

“BECAUSE THEY THEMSELVES SAW ” to 

the end, what we actually are looking at is a sepa- 
rate North Vietnamese message. The reason for 
two messages is easy to explain. The second one is 
reporting what the Vietnamese observed of the 4 
August action from either one of their boats near 
the coast, or coastal installations. 143 What the 
Vietnamese actually saw was either the flares 
dropped by the carrier Ticonderoga’s aircraft to 
illuminate the DRV boats they were told were 
there by the two destroyers, or any of the fifty or 
so starshells fired by the two American ships to 
illuminate targets. Note that the second intercept 
reports only that “ENEMY AIRCRAFT FALLING 
INTO THE SEA” There is no mention by the 
Vietnamese of shooting at them, as we would 
expect if it were an report after an engagement 
with the Americans as there is in the first inter- 
cept. In the same fashion, the flashes from the 
destroyers’ guns and shells exploding observed 
from over the horizon must have suggested to the 
Vietnamese that one of the American ships had 
been hit. San Miguel’s analysts recognized that 
the second intercept dealt with that evening’s 
actions. San Miguel, then, reported it first at 
1632Z, while the first intercept about “sacrificing 
comrades” was reported later at 1646Z. 

(S//SI) If we again look at the first intercept 
from San Miguel, we note that the Vietnamese 
claim they shot at two planes and damaged one. 
This happens to be in line with their later claims 
from the action on 2 August. Additionally, the 
loss of two comrades probably refers to the casu- 
alties suffered by T-336 from the same day’s 
fighting . 146 (Keep in mind that the whereabouts 
and condition of T-339 were unknown to the 
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DRV command as late as 4 August. It was still 
considered sunk.) 

(U) The congruence of the NSA and the San 
Miguel reports has been noted elsewhere. In 
Edwin Moise’s book on the Tonkin Gulf, he dis- 
cusses the resemblance between a “longer” mes- 
sage and a “shorter” one he had received from 
NSA in response to a FOIA request. Since he had 
received heavily redacted versions of “T10” and 
“R38” and “R39” from San Miguel, it was difficult 
for him to determine the critical fact that the two 
reports from the Philippines were issued before 
the NSA translation. However, he did catch the 
similarity among them, especially the phrases 
about the downed planes. 147 

(G//0I) - This finding that San Miguel had 
issued two separate reports, which probably had 
been conflated into a single translation by NSA, 
may explain the description by President 
Johnson of the discussions with the so-called 
technical experts at the White House the after- 
noon of the attack. The major point that Johnson 
related was the explanation that the expression 
“sacrificing two comrades” could have meant two 
enemy boats or two men. The fact that this issue 
was brought up strongly suggests that the reports 
from San Miguel probably were circulating 
among intelligence and defense officials, and that 
questions were being raised as to which version 
was correct, the boats or the comrades. But it is 
still not dear from this incident what the source 
was of the NSA version which claimed that two 
boats were lost instead of two men. As we stated 
earlier, without the original Vietnamese text, we 
are left with conjecture. However, with the great 
divergence between the reports issued by San 
Miguel and NSA, attention must fall primarily on 
the actions of the NSA analysts. Why did they 
change San Miguel’s original translation? 

(S//SI) T his analysis of the NSA translation of 
the so-called after-action report may appear 
excessive. Yet it is warranted because of the cru- 
cial role played by it in convincing the Johnson 



administration of the validity of the claim that the 
two destroyers indeed had been attacked by the 
North Vietnamese. The critical analysis of the 
translation has revealed several problems with 
the text itself, the context and timin g of the inter- 
cept, that is, whether it was really related to the 
attack, and finally, the circumstances of the origi- 
nal analysis of the intercept. 

(3//3I) If the results of this analysis of the 
translation were not enough to make one suspect 
its validity, the difficulties with the documentaiy 
source record undermine it all the more. For the 
sources we do not have, that is, the missing tech- 
nical supplements and the translation, “T162,” 
leave us with a serious gap: we have only the two 
field reports and single NSA English translation. 
The differences between the field version and the 
one published by NSA are too large to ignore; 
depending on which translation one accepts, the 
possible interpretations of the incident of 4 
August are either that nothing happened or that 
there was an attack. 

(U) Exhibit D: A Matter of Certainty 

(U) A question remains. What were the cir- 
cumstances surrounding the issuance of this last 
translation? The answer is that we do not exactly 
know the details of how it was put together. 
However, we do have some dues as to the envi- 
ronment in which the analysis reporting by NSA 
was done. 

(9//3I) A fter the 2 August attack, the analytic 
division concerned with the North Vietnamese 
problem, B26, had established an informal twen- 
ty-four-hour watch center to handle the SIGINT 
reporting from the Gulf of Tonkin. A relatively 
small team, perhaps fewer than ten, of analysts, 
linguists, and supervisory personnel, staffed the 
center. Unfortunately, there were what can be 
called “environmental pressures” on the staff. 
Notably, a crisis atmosphere surrounding every- 
one and everything, which, combined with 
twelve- to sixteen-hour days, probably led to seri- 
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ous problems of pressure and fatigue. There was 
also the problem that the linguists available were 
relatively inexperienced, some being barely a year 
or two removed from language school. Besides 
just reviewing the field intercept, people from this 
crisis cell also briefed the Pentagon and National 
Security Council. 148 

(S//SI) It appears that there was little in the 
way of control or interaction between this cell and 
senior NSA leadership. The director, NSA, 
General Blake, was out of town at the time. The 
various briefings at the Pentagon, and possibly 
the White House, were handled by mid-level 
managers and staffers operating out of the crisis 
cell and NSA liaison positions in the Pentagon 
and the White House. In fact, for the most part, it 
seems that senior NSA leadership stayed out of 
the proceedings, exercising little control or over- 
sight. 149 

(U) That there might have been a lot of pres- 
sure on the NSA people to produce “proof’ is 
quite likely. Regarding that charged period, Ray 
Cline, the former CIA deputy director, recalled 
that “Everybody was demanding the sigjnt (sig- 
nals intelligence; intercepts); they wanted it 
quick, they didn’t want anybody to take any time 
to analyze it.” 150 It was certainly a crisis moment. 
We know from the chronology mentioned earlier, 
that the translation of the “after-action” report 
arrived about two hours after the time that the 
first news of Captain Herrick’s doubts about the 
action had arrived in Washington. Also, as we 
have seen, McNamara’s evidence contained at 
least two points from the NSA translation. Of this, 
there is little to doubt. However, it remains a 
question as to whether the analysts and man- 
agers in NSA were certain of the second attack. 

(fi// SI) T t has been reported in other histories 
that the NSA analyst (or analysts) who actually 
decrypted and translated the intercepts were 
doubtful of the second incident from the very 
beginning, believing that the message referred to 



the 2 August attack. 151 Furthermore, a review of 
oral histories suggests that in the watch center 
there was a sort of division between those who 
were certain the second attack occurred, which 
was composed of mid-level management, and the 
analysts who were not so sure. 152 

f S//3I) Actually, the doubters were not as 
skeptical about the reality of the attack as much 
as they as were uncertain as how to label the 
intercept about the Vietnamese shooting at/down 
the aircraft. Was it related to what was happening 
in the Gulf of Tonkin? As one linguist recalled, the 
problem came down to “Was this, or was this 
not?” The deciding element for the analysts was 
the fact that the intercept time (1550Z or 1559Z) 
of the “after action” intercept coincided with the 
'time frame of the attack on the two destroyers: an 
analytic “coin toss” was made, and the translation 
went out which was inteipreted as supporting the 
validity of the second attack. 153 There was no 
explicit connection between the intercept and 
events: it was inferred from the coincidence of 
the time of the intercept and the time of the ongo- 
ing “attack.” Also implicit in this decision was a 
lack of confidence concerning the validity of the 
information; it could not stand by itself as the evi- 
dence, at least in the minds of the analysts. 

(U) On such small things as a mental “coin 
toss,” then, does history often turn. 

(S//SI) As to the nature of the translation, 
according to the same linguist, reportedly there 
were no enforced “word changes” in this report 
(or any others which were issued), though argu- 
ments over translation “styles” did occur. These 
arguments were over the rendering of the transla- 
tions from the Vietnamese original “into suitable 
English.” 154 

~ ff3//fll) This analysis by coin flip left the 
door open for follow-up reports which more 
openly supported the notion of an attack. Barely 
six hours after it issued the “after-action” transla- 
tion, NSA released its first summary report of the 
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action. This summary contained quotes from the 
earlier after-action translation. These quotes 
were placed in summary in such a way as to sub- 
stantiate collateral radar, sonar, and visual infor- 
mation from the Desoto patrol. On 6 August two 
more summaries were released by NSA which 
carried more SIGINT which the Agency asserted 
supported the second attack scenario. Publicly, at 
least, and probably from the very beginning, NSA 
supported the Johnson administration’s claim for 
a second attack. 155 These reports are important in 
understanding the post-attack position taken by 
NSA 

-(S//0ft As for the doubts about the second 
attack among the analysts at NSA it appears that 
none of them were ever publicized during the 
briefings with officials at the Defense Depart- 
ment. Or, if they were mentioned, they were 
downplayed. In fact, it seems that the NSA posi- 
tion was a fairly straightforward one: that the 
second attack occurred. 156 So firm was NSA’s 
position, that one previous NSA historian has 
suggested that this allowed President Johnson to 
shift the blame for the final decision from hi ms elf 
to the “experts” who had assured him of the 
strength of the evidence from the SIGINT. 157 

(U) Officially, eveiyone else in Washington 
supported the notion that there had been an 
attack. Later statements by various intelligence 
and Defense Department officials suggest that 
there was a large group who simply did not 
believe that the attack had happened or that the 
evidence even pointed to an attack. Many high- 
ranking officials from CIA the Department of 
State, and the Pentagon could not see the evi- 
dence assembled by McNamara as supporting a 
Vietnamese attack Some of them were skeptical 
(or claim to have been so) from almost the begin- 
ning of the incident. This group of doubters 
included the then U.S. Army’s deputy chief of 
staff for military operations, General Bruce 
Palmer Jr., Ray Cline, the CIA’s deputy director 
for intelligence, the heads of the Department of 
State’s Intelligence and Far Eastern Divisions, as 



well as a host of staffers on the National Security 
Council and in the Defense Department, who, in 
years to come, would become notable: Daniel 
Ellsberg, Alvid Friedman, and Alexander Haig. 

(U) Yet, despite doubts, people in the intelli- 
gence and defense communities kept their 
silence. As much as anything else, it was an 
awareness that President Johnson would brook 
no uncertainty that could undermine his position. 
Faced with this attitude, Ray Cline was quoted as 
saying: “. . . we knew it was bum dope that we 
were getting from the Seventh Fleet, but we were 
told only to give the facts with no elaboration on 
the nature of the evidence. Eveiyone knew how 
volatile LBJ was. He did not like to deal with 
uncertainties.” 158 

(3//SI) And there were plenty of people in 
NSA and the cryptologic community who doubt- 
ed that the SIGINT was convincing evidence of an 
attack Notable among these were the chief of B 
Group, who seems to have been skeptical from 
the morning of 5 August, and the NSA Pacific 
Representative (NSAPAC), who sent a message to 
DIRNSA listing his doubts after reviewing a 
CINCPAC study of the affair. 159 

(TS//SI) With all of the doubters about the 
attack, whether they were uncertain from the 
beginning, or saw the problems with the “evi- 
dence” later on, it is surprising that what emerged 
from various intelligence and Defense Depart- 
ment studies of the 4 August event were even 
more confirmations that the attack had occurred. 
Within weeks of the event, teams from the navy 
commands in the Pacific region, CINCPAC and 
Seventh Fleet, conducted reviews which verified 
the attack A Defense Department team arrived in 
mid-August and conducted interviews of the 
pilots and the crews of the destroyers. They found 
strong evidence for the attack as well. 160 The 
Joint Reconnaissance Center issued a chronology 
of events, while ASA Pacific Headquarters con- 
ducted a critique of the reporting by Phu Bai dur- 
ing SIGINT Readiness Bravo Lantern, the 
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enhanced SIGINT coverage ordered during the 
Gulf of Tonkin crisis. 161 Both documents support- 
ed the idea of a second attack. 

(S//SI) Exhibit E: And Some More Silent 
Dogs 

(3//S1) Various elements of the Naval 
Security Group, which oversaw and provided the 
manning for the Desoto missions, issued reports 
on the incidents in the Gulf of Tonkin which were 
strangely reticent about the evidence of the attack 
on the night of the 4th. For example, in the report 
issued by the commanding officer of NSG detach- 
ment aboard the Maddox, two and one-half pages 
are devoted to SIGINT reflections of the 2 August 
attack. The follow-up air strikes of 5 August war- 
rant another half page. Yet the statement summa- 
rizing the SIGINT activity of 4 August is rendered 
in just in one sentence: 

H. On 4 August information received from USN 
414T and USM 626J [Phu Bai] indicated a pos- 
sible attack on the Desoto ships by the DRV 
naval vessels. 162 

— (S/7SIT A report from the director, Naval 
Security Group Pacific, of 24 August was similar. 
Twelve paragraphs of the message are devoted in 
recounting the SIGINT detail of the 2 August 
attacks. The recounting of the “attack” of 4 
August was done in a short entry of two para- 
graphs, the first of which contained the informa- 
tion that T-142 was “again shadowing” the U.S. 
ships. It also refers to “moderately heavy track- 
ing” by two DRV tracking sites at Thanh Hoa 
(20°00 'n, 105°30 / E) and Hon En (18°18 / N, 
106°09 , E).” The site at Than Hoa would have 
tracked the two ships early on 4 August, but the 
attack was several hours later. When Hon En 
tracked the ships is unknown. The second para- 
graph mentions only the two reports from Phu 
Bai, stating that they indicated “a possible 
attack.” 163 



(Q//3I)"Further evidence, and perhaps one of 
the strongest pieces available indicating that no 
attack had happened, came from the North 
Vietnamese themselves. On 6 August, an uniden- 
tified DRV naval entity, possibly the naval HQ at 
Port Wallut, transmitted to an unidentified sta- 
tion a recap of the previous combat with the 
Americans. It summarized the events of 2 August 
and mentioned their boats fighting the “American 
warship.” It also recounted that their naval and 
air defense forces had shot down some American 
warplanes on 5 August and had captured one 
American pilot alive. Yet, there is no mention of 
anything occurring on the night of 4 August in 
this recap. 164 The absence of any reference to 4 
August cannot be attributed to North Vietnamese 
embarrassment over the results of the “action”; 
they lost heavily on both 2 and 5 August. The only 
conclusion that this intercept points to is that 
there was no attack on the night of 4 August. 

-(G//3I)"Oddly, this last intercept has never 
been used in any evaluation of the Gulf of Tonkin 
incidents. Understandably, those evaluations 
have tended to rely on the evidence from the time 
period of the incidents themselves. Surely, a 
North Vietnamese accounting of the operations 
for the previous three days would have been con- 
sidered as part of the body of evidence concerning 
the attack. Yet it was not used, although NSA 
summaries issued on the same day were. Was 
that because the intercept says nothing about an 
attack on 4 August? 

(S//SI) Maintaining the Line: The 
NSA Summary Reports and the 
“Del Lang Chronology” 

(3//5I ri As the field sites submitted their 
reports on what intercept they did or did not 
have, as in the case of the NSG element aboard 
the Maddox, and the analysts had the luxury of 
time to review all of the SIGINT, the various eval- 
uations they produced continued to reflect the 
official position that the second attack had 
occurred. The most important early response 
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from Fort Meade was a series of summary reports 
issued between 5 and 7 August. It is these reports 
which make up first official NSA judgment on 
what happened. Because of this, they deserve a 
dose look, since they establish the tone and form 
for the later chronology, which became, in a way, 
the final NSA statement on what had happened. 

(TS//Sfy NSA issued five summary and situa- 
tion reports after the incident, beginning early on 
5 August. Of the five, numbers “R01” through 
“R05,” the pertinent ones are the first three, espe- 
cially the first and third. These three reports 
explicitly state that the 4 August attack occurred. 
Report “R01” notes that the reports from the 
destroyer that it had sunk two torpedo boats were 
later “confirmed by a DRV message which stated 
‘that we had sacrificed two ships and the rest are 
okay’.” 165 Where this idea that two boats were 
sunk came from is hard to say. NSA received all 
messages from the Desoto patrol via the JCS. All 
through the afternoon of 4 August, the destroyers 
reported at first that three boats had been sunk, 
then later changed it to one sunk and one, possi- 
bly two, damaged. 166 The second post-incident 
report, known as “Gulf of Tonkin SIGINT 
Situation Report No. 1,” induded the statement 
“following the 4 August attack.” 

(TS//SI)' It was the third report that was the 
most open in supporting the idea of the second 
attack. It was stated in the lead sentence of the 
report that “This report is a summary of those 
DRV naval communications during the period 1- 
5 August which demonstrate irrefutably that DRV 
naval boats did, in fact, engage in preplanned 
combat against U.S. destroyers patrolling in 
international waters.” 167 

(TS//SI) However, the confident tone of the 
third report is belied by its thin layer of evidence. 
And this problem was noticed by some of its 
reripients. Late on the afternoon of 6 August, a 
DIA representative queried NSA if additional 
SIGINT was available from the 4 August incident. 
He reported that Secretary McNamara was not 



satisfied with the contents of this third summary 
report, “that it was insufficient for his purposes.” 
In reviewing the SIGINT from the incident, it was 
discovered that there was a large gap with no 
intercept - specifically, the time leading up to the 
actual attack. Based on this discovery, urgent 
messages were sent to the field sites requesting all 
intercept. 168 And, as we have seen, the field sites 
had nothing else to add. 

-(T0//GD There are problems with the way this 
series of reports portrays the information in 
them. For example, the first report mentions the 
salvage operations of the two damaged DRV tor- 
pedo boats which had been discussed earlier. 
However, unlike what we discovered, the summa- 
ry does not go on to report that these operations 
continued into the time of the attack as reported 
by the marines at Phu Bai. The authors of the 
third report tried to address this with the specu- 
lation that the attacking boats might have come 
from Quang Khe or some other base in the DRV 
Southern Command. 169 But this has already been 
shown to be wrong since the distance traveled for 
the boats to have attacked from the east could not 
have been accomplished because of the limita- 
tions of the boats’ speed. 

(TS// S I) Perhaps the most serious problem, 
though, is the lack of any citation of source 
reports which made up the summaries. This is a 
critical point, since the information referred to in 
the summaries is coming from already published, 
serialized NSA and field site reports and transla- 
tions. The veiy lack of notes is odd since this type 
of summary reporting required that source notes 
be included. It seems that if the Agency was 
attempting to build a case demonstrating that an 
attack had occurred, then the source reports and 
translations which substantiated the position 
would have been included. However, this was not 
the case. In fact, there were cases in which infor- 
mation used in the summaries as evidence, was, 
in fact, not related at all, or impossible to verify. 



TO P 3EeRCT//e OMI NT//X t 



Page 41 




DOCID: 3967107 

Cryptologic Quarterly TOP S E CRET//C OWI N T //XI 



(T3//SI) For example, the first summary, 
“R01,” issued early on 5 August, contained this 
section which strongly suggests that the Desoto 
patrol was surveyed by DRV aircraft. The entry 
read: 

During 3 August, DRV Naval 
Communications reflected the tracking 
and shadowing of the two destroyers 
throughout the day; this activity was 
reported by both destroyers. They were 
also apparently shadowed by two presum- 
ably DRV aircraft. A DRV merchant ship 
advised its shipping office in Haiphong 
that ‘two bombers’ would ‘fly’ in the direc- 
tion of the ship and investigate. No further 
identification of the aircraft was provid- 
ed. 170 

(T3//SI) This entry was lifted from a San 
Miguel report on DRV merchant shipping. In it, a 
single North Vietnamese merchant ship, the 
Thong Nhat, reported that two single-propeller 
aircraft ( chong chongs ), and not bombers, were 
flying to investigate the ship, presumably a refer- 
ence to itself. 171 Hanoi’s aircraft inventory con- 
tained two single-prop planes - the AN-2 (Colt), 
a small transport biplane and the YAK- 18 (Max) 
trainer - both of which were unsuitable to mar- 
itime patrols. Since the report never specified the 
nationality of the aircraft, it is likely that they 
were American A-1H single propeller fighter 
bombers from the Ticonderoga. 

( S // S I) At the time of the intercept, 1018Z on 
3 August, the Desoto patrol was some sixty miles 
to the south of the Thong Nhat, it seems reason- 
able that the Desoto combat air patrol would have 
gone to investigate the North Vietnamese 
freighter. 172 A few hours after the Thong Nhat 
reported the aircraft, the Haiphong shipping 
office transmitted an urgent message to three 
DRV merchant ships to “take precautions against 
enemy airplanes and ships.” 173 



-(T3//SI7In addition, the third report, “R03,” 
refers to intercept at 1054Z on 4 August that the 
DRV was trying to keep “activities under cover” 
when it was claimed that it had intercepted a 
message with the sentence “YOU CANNOT PUB- 
LICIZE THE SITUATION OF THE BOATS OF 
FLOTILLA 135 TO THE BACH DANG.” 174 Who 
is sending this message, and to whom, is not 
mentioned in the summary. To date, the source of 
this sentence has not been found; its context, the 
correctness of the translation, or even its correla- 
tion to the attack, cannot be determined. 

(TG//3It Report “R03” also carried another 
curious entry supporting the idea of an attack. 
This read “KHOAI HAD MET THE ENEMY.” 
Over the ensuing years this entry bothered people 
researching the incident. No one could find the 
original intercept, and no one could seem to 
explain it. 175 No wonder. The sentence was a 
rewrite of a San Miguel intercept. The original 
intercept was of a message from Haiphong to T- 
146, which originally read: “WHEN ((YOU)) 
MEET THE ENEMY T333 MUST MOBILIZE.” 
Since the local time of the intercept is 0211G 
(2011Z) on 5 August, the reference to meeting the 
enemy has nothing to do with the prior evening’s 
incident. In fact, the tense of the original transla- 
tion suggests that this was a message anticipating 
a possible future clash with the Americans, and it 
was expected that torpedo boat T-333 had to be 
ready to defend itself. 176 The name “KHOAI” was 
seen in other intercepts over the prior two days, 
including the infamous “militaiy operations” one 
of early 4 August. In reality, “KHOAI” probably 
was Le Duy Khoai, the commander of Squadron 
135. That he, the commanding officer, accompa- 
nied Section 3 in its attack against the Maddox on 
2 August, and stayed on to supervise the recovery 
operations of his two damaged boats, was stan- 
dard procedure for DRV naval officers. 177 

(TS//3 f) The main NSA effort at producing a 
record of the events of 2-5 August 1964 centered 
on a joint postmortem with the Defense 
Intelligence Agency, begun in late August 1964 
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and released on 14 October 1964. What was pro- 
duced was a chronology of events which support- 
ed the contention that there had been a second 
attack. The NSA version of the chronology stayed 
within the cryptologic community with a very 
narrow distribution totalling ten recipients. 
Later, after the second Gulf of Tonkin “incident” 
of 19 September 1964, a second volume was 
added to cover that event. 178 

— (l'S//5IJ This chronology, specifically the vol- 
ume titled “Chronology of Events of 2-5 August in 
the Gulf of Tonkin,” was bound in a black binder 
and came to be popularly referred to as the “Del 
Lang Chronology,” named after the B Group staff 
officer, Lieutenant Colonel Delmar Tang , USAF, 
who compiled it. Colonel Lang was a veteran 
cryptologic staff officer with a great deal of liaison 
experience with various SIGINT missions in Asia, 
starting with work during the Korean War. He 
would be instrumental later in implementing var- 
ious SIGINT support efforts for Rolling Thunder 
and Linebacker air campaigns. The chronology he 
produced solidified the official position that the 
attack had occurred. In the introduction, Lang 
claimed it to be as complete as far as the SIGINT 
involvement necessitated. The SIGINT material 
included product reports, translations, and 
selected messages between NSA and various field 
sites and liaison offices. The chronology also 
made heavy use of non-SIGINT sources, in this 
case messages from the Desoto patrol, CINCPAC, 
and the JCS. The chronology was arranged with 
an introductory time line which highlighted 
events between 2 to 5 August, followed by the 
documents which were notated with “tabs” num- 
bered sequentially and cross-referenced in the 
introduction. 179 

(S//GI) Like the summaries discussed above, 
there are serious problems in the chronology with 
both the amount and subject matter of the SIG- 
INT evidence and the way it is presented. For 
example, in reference to the 4 August incident, 
the chronology makes use of only six SIGINT 
products (not counting the summaries which 



were a review of published product) as evidence. 
Now, we have been referring to a large number of 
these products about the 4 August “attack” 
throughout this article. All told, between 3 and 6 
August, fifty-nine SIGINT products can be identi- 
fied as being relevant to that purported attack, 
that is, containing information related in some 
way to it. These include serialized reports, trans- 
lations, critics, follow-ups to the Critics, and tech- 
nical supplements. The fifty-nine products 
include status reports on the North Vietnamese 
boats, DRV tracking of the Desoto patrol from 
coastal observation posts and boats, salvage oper- 
ations of the damaged boats originally thought to 
be involved, DRV boat movement and location 
reports, and intelligence reports. So the six prod- 
ucts used in the chronology constitute a bit more 
than 10 percent of the total available. 

(S//S f)~Now, the introduction to the chronol- 
ogy refers to using “representative samples of 
DIRNSA’s COMINT reporting of the activities 
directly and indirectly related to the situation of 
the activities in the Gulf of Tonkin.” 180 How 
merely six out of fifty-nine is “representative” is 
difficult to understand. Furthermore, these six 
reports are the only ones which can be construed 
to demonstrate an aggressive intent on the part of 
Hanoi’s navy. They include a 3 August report of a 
concentration of DRV vessels near Hon Me 
Island, the three Critics and follow-ups concern- 
ing the “attack” being planned for the night of 4 
August, the translation of the so-called “after- 
action” report, and an early 5 August message 
reporting DRV plans for combat operations on 
the night of 5 August, which turned out to be 
related to the ongoing salvage operations. 181 

(8//SI )- N one of the other fifty-three products 
were included in the chronology. These include 
all of the ones that have been cited earlier in this 
article, and which demonstrated that no attack 
was planned, or proved that the North 
Vietnamese did not know the location of the 
American destroyers, or indicated that the sal- 
vage operations were the primary activity of 
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Hanoi’s navy, or the outright statements in some 
intercept for the DRV boats to stay away from the 
Americans. These products were available at the 
time of the composition of the chronology. Yet 
why they were not included is unknown. 
Obviously, their absence leaves the reader with 
the impression of Hanoi’s overt aggression 
against the American ships. 

(S//3I) The way the material is presented is 
also curious. Almost all of the SIGfNT product 
included for both 2 and 4 August has attached the 
reproduction of the original intercept of the DRV 
navy’s messages: that is, the cipher and its 

decrypted Vietnamese text. This allows the read- 
er to see the unfolding of the SIGENT process, 
from intercept to report. 

(S//SI) However, there is one glaring excep- 
tion to this: the 4 August translation of the so- 
called “after-action” report used by Secretary 
McNamara and President Johnson as primary 
evidence of the attack. In fact, only the translation 
is included, and it is there only as “a sample.” 
Considering the importance attached to it by the 
administration, as we saw earlier, this is a very 
odd way of presenting this piece of critical evi- 
dence. It would seem that the NSA originators of 
the chronology would have added the complete 
Vietnamese cipher and text to bolster the case for 
an attack. Yet the translation stands alone. Since 
we know that the intercept used to produce the 
translation currently is missing, might we ask if 
they were already “missing” shortly after the inci- 
dent itself? 

(S//SI) Finally, the chronology does not 
address the problem of the total lack of North 
Vietnamese C3I related to the supposed 4 August 
attack. Not surprisingly, there are samples of the 
C3I from the 2 August attack. Yet, aside from the 
so-called “attack” message and the purported 
“after-action” report, there is nothing. We have 
commented on this before. The argument that the 
material may not have been available in early 
August might have had some slight relevance. 



The chronology might have been the vehicle for 
addressing this shortcoming. However, fully two 
months later, there is still nothing included of the 
enemy’s C3I - the huge gap is not addressed, 
much less explained, by NSA. 

(G//3I) Over the years, the chronology came 
to be the source book for responses to congres- 
sional inquiries into the Gulf of Tonkin incidents. 
That is, the other 90 percent of related SIGINT 
product was not offered to any congressional 
investigating committees. Instead, the chronolo- 
gy became, by virtue of its position as an “official” 
report, the only source for background on the 
Gulf of Tonkin incidents. 

~(T3//GI)-The first investigation came in early 
1968 when the Senate Foreign Relations 
Committee, under the chairmanship of Senator 
William Fulbright, who had steered the Gulf of 
Tonkin Resolution through the Senate, opened 
hearings on the incident. Secretary of Defense 
Robert McNamara was called in to testify. Prior 
to his testimony, he requested that the pertinent 
COMENT on the incidents be given to him. The 
NSA and the Defense Intelligence Agency were 
reluctant to have the SIGENT used; both agencies 
were fearful that the exposure would compromise 
the then current capabilities against the North 
Vietnamese. 182 Ultimately, Secretary McNamara 
was given the contents of the chronology, as was 
the Senate committee as well. The resulting hear- 
ings did nothing to clear up the confusion. 
McNamara argued for the attack, citing the vari- 
ous SIGINT reports, though he seemed to mix up 
what was in them, and left observers sometimes 
confused. 183 Many senators, looking at the same 
chronology, remained skeptical. 

-(G//3IT In August 1975, the Senate Select 
Committee on Intelligence, under the chairman- 
ship of Senator Frank Church of Idaho, 
approached NSA about the Gulf of Tonkin inci- 
dent. The committee’s interest, though, may not 
have been in establishing the validity of the inci- 
dent; their attention was focused on information 
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concerning the covert OPLAN 34A and Desoto 
missions, and what exactly was being done by 
both operations. NSA’s response to the Church 
Committee’s request was similar to that of 
Fulbright’s: limited release of materials from the 
chronology. In fact, NSA was concerned that the 
Church Committee get exactly what Fulbright 
had received. 184 Again, the chronology of the 
events of 2 to 4 August was the source used for 
material to be released. Interestingly, a major fig- 
ure in these latter deliberations on what to release 
to the Senate was the then-retired, former deputy 
director of NSA, Dr. Louis Tordella. He had 
advised the NSA staff as to what to release and 
hold back. Curiously, one of the few things held 
back was a similar chronology of the events of 
mid-September 1964, in which another Desoto 
patrol claimed it had been attacked. 

(S//9I) Gulf of Tonkin Redux: 

The 18 September “Attack” 

(S/'/SI) In an interesting and ironic repeat of 
the Gulf of Tonkin incidents, on 18 September 
1964 another Desoto patrol would undergo the 
same experience as the Maddox and Turner Joy. 
In this incident, two destroyers, the USS Morton 
(DD 948) and the USS Richard S. Edwards (DD 
950), were assigned a Desoto mission for mid- 
September. The ships began their operations on 
16 September. The North Vietnamese knew 
almost from the start that the two vessels would 
be in the area and were tracking it. The DRV 
naval authorities also ordered their ships and 
posts to be on alert and to be aware for “provoca- 
tions” by the Americans. 1 ® 5 

(S//SI) North Vietnamese tracking of the two 
destroyers held through the 17th and into the 18th 
of September. At 1738G (1038Z) on 18 
September, a message was passed from an 
unidentified DRV naval authority that ordered all 
ships to take precautions against possible South 
Vietnamese maritime commandos who might 
take advantage of the presence of the American 
ships in the area to launch an attack. The North 



Vietnamese ships were also ordered to “avoid 
provocation” and to disperse and camouflage. 186 

(U) At about 1729G (1029Z), the two destroy- 
ers acquired radar contacts following them. Both 
ships began to maneuver and increase speed to 
dear the apparent vessels trailing them. About 
forty-five minutes later, the Morton fired a warn- 
ing shot at one of the contacts. By this time, the 
Americans counted on their radar scopes five 
ships trailing them. However, the warning shot 
did not deter the threatening vessels. About ten 
minutes later, both ships opened fire. For about 
the next hour, both American ships engaged the 
contacts as they appeared on their radar screens. 
Oddly, at no time did the contacts return any fire, 
nor did they launch any torpedoes. Even more 
curious, only one of the enemy ships ever closed 
faster than twenty-three knots. In fact, the con- 
tacts pretty much matched the speeds of the 
destroyers. Meanwhile, the Morton and Edwards 
fired almost 300 rounds at the contacts and 
claimed to sink as many as five of the vessels 
(there were now more than the original five con- 
tacts) which had been menacing them. 

~ (8 )~The JCS ordered a search, to begin the 
next morning, of the area for debris to confirm 
the attacks. At the same time, plans were put 
under way for another retaliatory strike against 
the DRV. More air force and navy aircraft were 
dispatched to the region to reinforce the proposed 
strikes. 187 Yet, nothing happened. The area was 
searched, but no debris nor even an oil slick was 
found. The JCS continued to request data on the 
attacks from all the intelligence and combat com- 
mands. Yet even by the 19th there still was no 
concrete evidence of an attack. 188 

(TS//8I) A vailable SIGINT information indi- 
cated that the North Vietnamese were well aware 
of the presence of the two destroyers, but 
remained in a defensive posture. The DRV was 
looking to react to a possible maritime raid by the 
South Vietnamese, but there were no reflections 
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of any hostile intent against the two destroyers. 189 
In feet, on 20 September NSA corrected a Critic 
by San Miguel which claimed that the DRV was 
planning to attack the Desoto patrol that evening. 
Fort Meade pointed out that the intercepted 
information could apply equally to an attack on 
South Vietnamese “raiders.” 190 

(U) By the end of 20 September, the issue 
remained unresolved. The Edwards and Morton 
were ordered to return to the nearby carrier task 
group, and the Desoto missions were indefinitely 
suspended, and, in fact, except for an occasional 
training cruise, they were never carried out 
again. 191 

* * * * 

(U) In certain histories of the Indochina War, 
it has been fashionable to maintain that, in the 
final accounting, whether or not there was an 
attack on U.S. Navy destroyers on 4 August in the 
Gulf of Tonkin may not have mattered at all. The 
Johnson administration had been looking for a 
way to expand America’s role in South Vietnam. 
In June 1964, two months before the August 
attacks, a resolution had been prepared by 
William Bundy, assistant secretary of state for Far 
Eastern Affairs, which would give the president 
the right to commit U.S. forces to the defense of 
any nation in Southeast Asia threatened by com- 
munist aggression or subversion. Furthermore, 
the draft resolution gave Johnson both the dis- 
cretion to determine the extent of the threat and, 
by virtue of this evaluation, the leeway to define 
what forces and actions were necessary to count- 
er it. At first, the resolution was planned to be put 
before the Senate as soon as possible. But 
President Johnson demurred, fearing that it 
would ruin the image of moderation he had been 
cultivating for the presidential election in 
November. The draft resolution was quietly 
shelved until another opportunity could come 
along. 192 



(U) The Johnson administration used the 4 
August incident to ride the resurrected resolu- 
tion, now popularly referred to as the Tonkin Gulf 
Resolution, through the Senate, with only two 
dissenting votes. It was portrayed as a moderat- 
ing measure “calculated to prevent the spread of 
war.” 193 However, President Johnson now had 
the legal cover to use whatever military force he 
wanted. When he heard of its passage by both 
houses, he laughed and told an aide that the res- 
olution “was like Grandma’s nightshirt. It covers 
everything.” 194 

(U) Yet, even with the resolution in his pock- 
et, President Johnson ignored the similar 
September Gulf of Tonkin “incident,” and did not 
order a retaliation against North Vietnam. It 
would take another communist attack on 
American forces, the strike at the American base 
at Pleiku in February 1965, to make Washington 
escalate the war a further step, this time initiating 
the Rolling Thunder air campaign. 195 

(U) The problem, of course, was the nature of 
the provocation which made possible the passage 
of the resolution. If the resolution had been tied 
to the naval action of the afternoon of 2 August, or 
to the communist bombing of the officers’ quar- 
ters in Saigon on Christmas Eve 1964, or even to 
the VC sapper attack on the air base at Bien Hoa 
on 1 November 1964, then the administration at 
least would have had an actual incident upon 
which to base support for it. Then any reconsid- 
eration of the resolution would have centered 
solely on it and not the incident on which it was 
based. 

(U) Unfortunately, the administration chose 
to hang the rationale for expanding its war-mak- 
ing franchise in Southeast Asia on an incident 
which could not stand up to any kind of objective 
examination of the full documentation. So, as 
eventually happened in 1968, when the Gulf of 
Tonkin Resolution came to be reviewed, the inci- 
dent that it was based on also came under scruti- 
ny. When the events of 4 August were revealed to 
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have been based on very thin evidence, it concur- 
rently was demonstrated that the Johnson 
administration had indulged in a very selective 
use of information. If the administration had not 
lied exactly, it had not been exactly honest with 
the public, or, for that matter, even honest within 
its own deliberations. The question no longer was 
about the appropriateness of the resolution, but 
the basic honesty of the administration. It would 
cast a pall on an already distrusted Johnson pres- 
idency. As Senator Barry Goldwater, who had run 
against Johnson in the 1964 presidential election, 
bitterly noted years later in 1972, “I had no reason 
to believe that Mr. Johnson’s account of the grav- 
ity existing in the Gulf of Tonkin was not legiti- 
mate.” 196 

(U) As for the Tonkin Gulf incident itself, 
President Johnson summed it up best just a few 




CIO A Douglas A-4 Skyhawk attack plane 
catapults from a earner in the Gulf of Tonkin 
during attack operations in August 1964. 



days later: “Hell, those damn, stupid sailors were 
just shooting at flying fish.” 

* * * * 

(U) In this article we have done something 
quite apart from most Agency histories: Using 
virtually hitherto untouched material from a vari- 
ety of sources, we have told a radically different 
version of an important event in cryptologic his- 
tory which, in turn, had a critical effect on the 
course of American history. In doing so, a great 
deal of unfamiliar ground, in terms of source 
material, had to be covered, and the new infor- 
mation could not be presented in a typical, his- 
torical narrative format. Instead, we had to 
painstakingly analyze a series of documents 
which were quite important if we were to grasp 
what happened on 4 August 1964. Admittedly, 
this was a difficult task, but it was necessary if we 
were to be as comprehensive as possible in our 
analysis of what happened. 

(U) After recounting all of the events and ana- 
lyzing the sources, the remaining task for the his- 
torian is to attempt to characterize them, to offer 
a summation or a judgment that will place the 
narrative into a coherent framework. But before 
that can be done, it is necessary to review what 
has been presented. In this way we can consider 
again what we have learned about the events in 
early August. 

(S//SI) We have seen that the Gulf of Tonkin 
incidents occurred as a result of the congruence 
of the Desoto patrols and the maritime comman- 
do raids along the North Vietnamese coast car- 
ried out under OPLAN 34A. In the period leading 
up to the Maddox mission, the DRV had been 
reacting with increasing force to the OPLAN 34A 
attacks. Monitoring Hanoi’s more aggressive 
response to the raids, NSA had warned the major 
commands in the region of the potential danger 
for the Desoto patrols, but the warning did not 
register. The decision makers in Washington 



T OP 3ECRE T //C 0 M I N T //X I 



Page 47 



DOCID: 3967107 

Cryptologic Quarterly TOP CCOnCTIIQO MI K T /fl tt 



believed that Hanoi would not see the two mis- 
sions as related. 

(0//8 f) On 2 August, the SIGINT system per- 
formed admirably when it provided sufficient 
warning to the Maddox to allow it to defend itself 
against the attack by the three DRV torpedo 
boats. At the same time, the American cryptolo- 
gists were able to observe the DRV naval C3I sys- 
tem in action. From this they should have devel- 
oped a profile from which further timely warn- 
ings could be deduced. During 3 August, both 
sides maintained a distant watchfulness, though 
tensions remained high - high enough, perhaps, 
for the field site at Phu Bai to confuse salvage 
operations around the island of Hon Me for a pre- 
attack concentration of forces. 

(S//SI) The 4 August incident began in the 
early afternoon due to an analytic error by the 
Marine contingent at Phu Bai. This mistake set in 
the minds of the crew of the two destroyers the 
idea that they shortly would be attacked. This was 
an error of interpretation by the Marine unit at 
Phu Bai, a mistake, as we have seen, which was 
not committed by the navy site at San Miguel. 
Nor was the Critic transmitted by Phu Bai ques- 
tioned or corrected at NSA. This may have been in 
line with an unspoken policy of not second-guess- 
ing field sites since they were “closer” to the 
action. However, under Critic procedures, Phu 
Bai had to supply the technical information upon 
which it based its alert. When the discrepancy 
between what the intercept actually said and what 
the Marine detachment reported became known, 
NSA should have cautioned the recipients of the 
Critic. However, this did not happen. 

- (0/ /D f^Three hours later, at almost the same 
moment that the American destroyers opened 
fire on the approaching radar return, Phu Bai 
issued another report which stated that the spe- 
cific boats, which had been identified as being 
readied for an attack, in reality, were to be towed 
to Haiphong for repairs. This salvage operation 
would be the subject of several more reports dur- 



ing the rest of the evening of 4 August. Since no 
other boats were referenced in the original 
“attack” message, the cryptologists at NSA found 
themselves without any SIGINT evidence sup- 
porting the reports of an ambush. The Phu Bai 
reports had effectively cancelled out the original 
Critic. However, the response by NSA was to 
counter the SIGINT evidence with an unfounded 
speculation that the boats the Desoto patrol 
thought were attacking it came from Quang Khe. 
And it has been demonstrated how impossible 
this scenario was. 

(S//SI) It also has been established that none 
of the C3I associated with DRV naval attack of 2 
August was present on 4 August. Aside from spo- 
radic North Vietnamese coastal tracking, which 
ended hours before the two destroyers turned 
east, there was no intercept to suggest the North 
Vietnamese had anything more than the usual 
interest in the two ships. Nor, for that matter, was 
there any intercept of any DRV naval communi- 
cations which suggested in any manner that an 
attack was planned, much less that one actually 
was occurring. In fact, Hanoi seemed more inter- 
ested in warning its boats of the patrol’s presence, 
viewing the Ameri cans as a threat to its navy. For 
the cryptologic community, this lack of any attack 
C3I is one of the most critical points of the Gulf of 
Tonkin crisis. Yet, NSA never addressed the issue 
in any reports or activity summaries it published 
concerning the 4 August incident. 

(S//SI) I nstead, NSA would issue summaries 
with scattered tidbits of contentious and unrefer- 
enced intercept (“Khoai had met the enemy” and 
the purported aerial tracking) to support the 
notion that an attack had been planned and that 
it had been carried out. The extensive amount of 
SIGINT evidence that contradicted both the ini- 
tial attack order and the notion that any North 
Vietnamese boats were involved in any “military 
operations,” other than salvage of the two dam- 
aged torpedo boats, was either misrepresented or 
excluded from all NSA produced post-incident 
summaries, reports, or chronologies. NSA’s fail- 
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lire to deal with both issues, the lack of any attack 
C3I and the contradictory SIGINT, especially 
during the critical hours leading up to the retalia- 
tory air strikes of 5 August, remains its most glar- 
ing shortcoming in this incident. 

— (S //GI) W e have seen as well the many tech- 
nical problems with the supposed “after-action” 
translation. This product, upon which the admin- 
istration based so much of its case, appears to 
have been the result of an analytic error of com- 
bining two separate messages, each dealing with 
separate incidents, into a single translation. 
There were more problems, such as the actual 
translation of the term “comrades” and how it 
was rendered into “boats” by NSA Here, the ana- 
lytic problems mix with those discovered about 
the available records: the original decrypted 
Vietnamese text, and an important translation 
from San Miguel cannot be located. Considering 
the importance of this translation to the adminis- 
tration’s case, the fact that the original text cannot 
be found (and was not used as early as October 
1964) is unusual. That these original texts and 
translation are the only missing papers in the San 
Miguel reports allows for suspicion to shade any 
further discourses. 

(S//9I) What we are confronted with is the 
same conundrum that confronted the NSA ana- 
lysts at the time. We have discussed earlier that, 
for the most part, the NSA personnel in die crisis 
center who reported the second Gulf of Tonkin 
incident believed that it had occurred. The prob- 
lem for them was the SIGINT evidence. The evi- 
dence that supported the contention that an 
attack had occurred was scarce and nowhere as 
strong as would have been wanted. The over- 
whelming body of reports, if used, would have 
told the story that no attack had happened. So a 
conscious effort ensued to demonstrate that the 
attack occurred. 

~ (3//GI) The exact “how” and “why” for this 
effort to provide only the SIGINT that supported 
the claim of an attack remain unknown. There are 



no “smoking gun” memoranda or notes buried in 
the files that outline any plan or state a justifica- 
tion. Instead, the paper record speaks for itself on 
what happened: what few product (six) were 
actually used, and how 90 percent of them were 
kept out of the chronology; how contradictory 
SIGINT evidence was answered both with specu- 
lation and fragments lifted from context; how the 
complete lack of Vietnamese C3I was not 
addressed; and, finally, how critical original 
Vietnamese text and subsequent product were no 
longer available. From this evidence, one can eas- 
ily deduce the deliberate nature of these actions. 
And this observation makes sense, for there was a 
purpose to them: This was an active effort to 
make SIGINT fit the claim of what happened dur- 
ing the evening of 4 August in the Gulf of Tonkin. 

-fS//Sf)"The question why the NSA personnel 
handled the product the way they did will proba- 
bly never be answered. The notion that they were 
under “pressure” to deliver the story that the 
administration wanted simply cannot be support- 
ed. If the participants are to be believed, and they 
were adamant in asserting this, they did not bend 
to the desires of administration officials. Also, 
such “environmental” factors as overworked cri- 
sis center personnel and lack of experienced lin- 
guists are, for the most part, not relevant when 
considering the entire period of the crisis and fol- 
low-up. As we have seen, the efforts to ensure that 
the only SIGINT publicized would be that which 
supported the contention that an attack had 
occurred continued long after the crisis had 
passed. While the product initially issued on the 4 
August incident may be contentious, thin, and 
mistaken, what was issued in the Gulf of Tonkin 
summaries beginning late on 4 August was delib- 
erately skewed to support the notion that there 
had been an attack. What was placed in the offi- 
cial chronology was even more selective. That the 
NSA personnel believed that the attack happened 
and rationalized the contradictory evidence away 
is probably all that is necessary to know in order 
to understand what was done. They walked alone 
in their counsels. 
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